debian/noweb vulnerabilities

Latest debian/noweb CVEs

Newest publication first

1. CVE-2005-3342 noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in (1) lib/toascii.nw and (2) shell/roff.mm.

   Published 2006-02-14

   Low·CVSS 1.2 EPSS 0.35%

   noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in (1) lib/toascii.nw and (2) shell/roff.mm.

2. DSA-968-1 noweb - insecure temporary file

   Published 2006-02-13

   Unknown

3. CVE-2003-0381 Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the noroff script.

   Published 2003-06-20

   Low·CVSS 2.1 EPSS 0.33%

   Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the noroff script.

4. DSA-323 noweb - insecure temporary files

   Published 2003-06-16

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.