CVE-2003-0381 Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the noroff script.
LowCVSS 2.1
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the noroff script.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| norman ramsey noweb | <= 2.9 | No fix listed |
| debian/noweb(Debian:12) | < 2.10c-3.1 | 2.10c-3.1 |
| debian/noweb(Debian:13) | < 2.10c-3.1 | 2.10c-3.1 |
| debian/noweb(Debian:14) | < 2.10c-3.1 | 2.10c-3.1 |
References
- DSA-323 patch vendor-advisory
- Debian Security Tracker CVE-2003-0381 vendor-advisory
- bugs.debian.org issue-tracking