CVE-2003-0596 FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdcl...
LowCVSS 3.6
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdclone users by creating the directory ahead of time.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fdclone | = 2.00a | No fix listed |
| debian/fdclone(Debian:12) | < 2.04-1 | 2.04-1 |
| debian/fdclone(Debian:13) | < 2.04-1 | 2.04-1 |
| debian/fdclone(Debian:14) | < 2.04-1 | 2.04-1 |
References
- bugs.debian.org
- DSA-352 vendor-advisory
- Debian Security Tracker CVE-2003-0596 vendor-advisory