CVE-2003-1294
Summary
| CVE | CVE-2003-1294 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2003-12-31 05:00:00 UTC |
| Updated | 2017-10-11 01:29:00 UTC |
| Description | Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Xscreensaver | Xscreensaver | 4.05_150 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.05_5cl | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.05_6 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.05_6a | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.07_2 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.08_29135cl | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.09_0 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.10_15 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.10_4 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.10_6 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.10_8 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.11_0 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.12_58 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.12_62 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.14_0 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.14_2 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.14_4 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.14_5 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.05_150 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.05_5cl | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.05_6 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.05_6a | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.07_2 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.08_29135cl | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.09_0 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.10_15 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.10_4 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.10_6 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.10_8 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.11_0 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.12_58 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.12_62 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.14_0 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.14_2 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.14_4 | All | All | All |
| Application | Xscreensaver | Xscreensaver | 4.14_5 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | VUPEN | www.vupen.com | |
| jwz - xscreensaver 4.15 | MISC | jwz.livejournal.com | |
| SuSE XScreenSaver Package Multiple Vulnerabilities | BID | www.securityfocus.com | |
| ASA-2006-107 (RHSA-2006-0498) | CONFIRM | support.avaya.com | |
| Avaya Products XScreenSaver Insecure Temporary File Creation Vulnerability - Advisories - Secunia | SECUNIA | secunia.com | |
| XScreenSaver Insecure Temporary File Creation Vulnerability - Advisories - Secunia | SECUNIA | secunia.com | |
| bugzilla.redhat.com/bugzilla/attachment.cgi | CONFIRM | bugzilla.redhat.com | |
| Secunia - Advisories - Red Hat update for xscreensaver | SECUNIA | secunia.com | |
| SGI Advanced Linux Environment Multiple Updates - Advisories - Secunia | SECUNIA | secunia.com | |
| 182286 – CVE-2003-1294 xscreensaver temporary file flaws | CONFIRM | bugzilla.redhat.com | |
| 20060602-01-U | SGI | patches.sgi.com | |
| Support | REDHAT | www.redhat.com | |
| SUSE LINUX 9.0 (i386) | CONFIRM | www.novell.com | |
| Repository / Oval Repository | OVAL | oval.cisecurity.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.