CVE-2004-0996 main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.
LowCVSS 2.1
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cscope | = 13.0 | No fix listed |
| cscope | = 15.1 | No fix listed |
| cscope | = 15.3 | No fix listed |
| cscope | = 15.4 | No fix listed |
| cscope | = 15.5 | No fix listed |
| debian linux | = 3.0 | No fix listed |
| gentoo linux | All versions | No fix listed |
| sco unixware | = 7.1.1 | No fix listed |
| sco unixware | = 7.1.3 | No fix listed |
| sco unixware | = 7.1.4 | No fix listed |
| debian/cscope(Debian:12) | < 15.5-1.1 | 15.5-1.1 |
| debian/cscope(Debian:13) | < 15.5-1.1 | 15.5-1.1 |
| debian/cscope(Debian:14) | < 15.5-1.1 | 15.5-1.1 |
References
- Debian Security Tracker CVE-2004-0996 vendor-advisory
- bugs.debian.org issue-tracking
- docs.info.apple.com
- APPLE-SA-2007-07-31 vendor-advisory
- 20041124 STG Security Advisory: [SSA-20041122-09] cscope insecure temp file creation vulnerability mailing-list
- 26235 third-party-advisory
- DSA-610 patch vendor-advisory
- GLSA-200412-11 vendor-advisory
- 20041117 RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch. mailing-list
- 20041118 Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch. mailing-list
- 20041118 Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch. mailing-list
- 11697 exploit patch vdb-entry vendor-advisory
- 25159 vdb-entry
- ADV-2007-2732 vdb-entry
- cscope-tmp-race-condition(18125) vdb-entry