CVE-2003-0603 | BDVDB-2026-5722 Detail

Description#

Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to overwrite arbitrary files via a symlink attack on temporary files that are created in directories with group-writable or world-writable permissions.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000653
http://www.securityfocus.com/bid/7412
http://www.bugzilla.org/security/2.16.2/

Exploit#

No public exploit known

History#

Version 12003-07-29Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.