Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2003-1294
HistoryFeb 28, 2006 - 1:00 a.m.

CVE-2003-1294

2006-02-2801:00:00
redhat
web.nvd.nist.gov
35
xscreensaver
cve-2003-1294
security
vulnerability
symlink attack
nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.2

Confidence

Low

EPSS

0

Percentile

10.1%

JSON

Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack.

Affected configurations

Nvd
Node
xscreensaverxscreensaverMatch4.05_5cl
OR
xscreensaverxscreensaverMatch4.05_6
OR
xscreensaverxscreensaverMatch4.05_6a
OR
xscreensaverxscreensaverMatch4.05_150
OR
xscreensaverxscreensaverMatch4.07_2
OR
xscreensaverxscreensaverMatch4.08_29135cl
OR
xscreensaverxscreensaverMatch4.09_0
OR
xscreensaverxscreensaverMatch4.10_4
OR
xscreensaverxscreensaverMatch4.10_6
OR
xscreensaverxscreensaverMatch4.10_8
OR
xscreensaverxscreensaverMatch4.10_15
OR
xscreensaverxscreensaverMatch4.11_0
OR
xscreensaverxscreensaverMatch4.12_58
OR
xscreensaverxscreensaverMatch4.12_62
OR
xscreensaverxscreensaverMatch4.14_0
OR
xscreensaverxscreensaverMatch4.14_2
OR
xscreensaverxscreensaverMatch4.14_4
OR
xscreensaverxscreensaverMatch4.14_5
VendorProductVersionCPE
xscreensaverxscreensaver4.05_5clcpe:2.3:a:xscreensaver:xscreensaver:4.05_5cl:*:*:*:*:*:*:*
xscreensaverxscreensaver4.05_6cpe:2.3:a:xscreensaver:xscreensaver:4.05_6:*:*:*:*:*:*:*
xscreensaverxscreensaver4.05_6acpe:2.3:a:xscreensaver:xscreensaver:4.05_6a:*:*:*:*:*:*:*
xscreensaverxscreensaver4.05_150cpe:2.3:a:xscreensaver:xscreensaver:4.05_150:*:*:*:*:*:*:*
xscreensaverxscreensaver4.07_2cpe:2.3:a:xscreensaver:xscreensaver:4.07_2:*:*:*:*:*:*:*
xscreensaverxscreensaver4.08_29135clcpe:2.3:a:xscreensaver:xscreensaver:4.08_29135cl:*:*:*:*:*:*:*
xscreensaverxscreensaver4.09_0cpe:2.3:a:xscreensaver:xscreensaver:4.09_0:*:*:*:*:*:*:*
xscreensaverxscreensaver4.10_4cpe:2.3:a:xscreensaver:xscreensaver:4.10_4:*:*:*:*:*:*:*
xscreensaverxscreensaver4.10_6cpe:2.3:a:xscreensaver:xscreensaver:4.10_6:*:*:*:*:*:*:*
xscreensaverxscreensaver4.10_8cpe:2.3:a:xscreensaver:xscreensaver:4.10_8:*:*:*:*:*:*:*
Rows per page:
1-10 of 181

Related

nvd 1
debiancve 1
cvelist 1
nessus 2
redhat 1
centos 2
nvd
nvd
CVE-2003-1294
2003-12-31 05:00:00
debiancve
debiancve
CVE-2003-1294
2006-02-28 01:00:00
cvelist
cvelist
CVE-2003-1294
2006-02-28 01:00:00
nessus
nessus
RHEL 2.1 / 3 : xscreensaver (RHSA-2006:0498)
2006-05-24 00:00:00
CentOS 3 : xscreensaver (CESA-2006:0498)
2006-07-03 00:00:00
redhat
redhat
(RHSA-2006:0498) xscreensaver security update
2006-05-23 00:00:00
centos
centos
xscreensaver security update
2006-05-23 21:39:54
xscreensaver security update
2006-05-24 01:13:53

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.2

Confidence

Low

EPSS

0

Percentile

10.1%

JSON
Related for CVE-2003-1294
nvd1debiancve1cvelist1nessus2redhat1centos2