CVE-2003-0539 skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files.
MediumCVSS 4.6
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ddskk | = 11.6_.rel.0 | No fix listed |
| redhat daredevil skk | = 11.3.2 | No fix listed |
| redhat daredevil skk | = 11.3.5 | No fix listed |
| redhat daredevil skk | = 11.6.0-6 | No fix listed |
| redhat daredevil skk | = 11.6.0-8 | No fix listed |
| redhat daredevil skk | = 11.6.0-10 | No fix listed |
| redhat ddskk-xemacs | = 11.6.0-6 | No fix listed |
| redhat ddskk-xemacs | = 11.6.0-8 | No fix listed |
| redhat ddskk-xemacs | = 11.6.0-10 | No fix listed |
| skk | = 10.62a | No fix listed |
| debian/ddskk(Debian:12) | < 12.1.cvs.20030622-1 | 12.1.cvs.20030622-1 |
| debian/ddskk(Debian:13) | < 12.1.cvs.20030622-1 | 12.1.cvs.20030622-1 |
| debian/ddskk(Debian:14) | < 12.1.cvs.20030622-1 | 12.1.cvs.20030622-1 |
References
- DSA-343 patch vendor-advisory
- RHSA-2003:242 vendor-advisory
- oval:org.mitre.oval:def:28 signature vdb-entry
- Debian Security Tracker CVE-2003-0539 vendor-advisory