CVE-2003-1294

2006-02-2801:00:00

Debian Security Bug Tracker

security-tracker.debian.org

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

10.1%

JSON

Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack.

OSVersionArchitecturePackageVersionFilename
Debian12allxscreensaver< 4.15-1xscreensaver_4.15-1_all.deb
Debian11allxscreensaver< 4.15-1xscreensaver_4.15-1_all.deb
Debian999allxscreensaver< 4.15-1xscreensaver_4.15-1_all.deb
Debian13allxscreensaver< 4.15-1xscreensaver_4.15-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	xscreensaver	< 4.15-1	xscreensaver_4.15-1_all.deb
Debian	11	all	xscreensaver	< 4.15-1	xscreensaver_4.15-1_all.deb
Debian	999	all	xscreensaver	< 4.15-1	xscreensaver_4.15-1_all.deb
Debian	13	all	xscreensaver	< 4.15-1	xscreensaver_4.15-1_all.deb