CVE-2003-0885 | BDVDB-2026-15372 Detail

Description#

Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the (1) apple2, (2) xanalogtv, and (3) pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=182286
http://bugs.gentoo.org/show_bug.cgi?id=41253

Exploit#

No public exploit known

History#

Version 12006-02-28Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.