CVE-2003-0193 msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names ("word$$.html").
LowCVSS 2.1
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names ("word$$.html").
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| catdoc | <= 0.91 | No fix listed |
| debian/catdoc(Debian:12) | < 0.91.5-2 | 0.91.5-2 |
| debian/catdoc(Debian:13) | < 0.91.5-2 | 0.91.5-2 |
| debian/catdoc(Debian:14) | < 0.91.5-2 | 0.91.5-2 |
References
- bugs.debian.org
- 13021 third-party-advisory
- 13022 third-party-advisory
- DSA-575 vendor-advisory
- 11193 vdb-entry
- 11560 vdb-entry
- catdoc-xlsview-symlink(16335) vdb-entry
- Debian Security Tracker CVE-2003-0193 vendor-advisory