CVE-2004-2462 cplay 1.49 on Linux allows local users to overwrite arbitrary files via a symlink attack on the cplay_control temporary file.
MediumCVSS 4.6
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
cplay 1.49 on Linux allows local users to overwrite arbitrary files via a symlink attack on the cplay_control temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cplay | = 1.49 | No fix listed |
| debian/cplay(Debian:10) | < 1.49-3 | 1.49-3 |
References
- 11924 third-party-advisory vendor-advisory
- 1010574 vdb-entry
- 7222 vdb-entry
- 10597 vdb-entry
- cplay-tmpfile-insecure(16482) vdb-entry