CVE-2003-1294
 
Severity Score
2.1
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2003-12-31 CVE Published
- 2006-02-28 CVE Reserved
- 2023-07-23 EPSS Updated
- 2024-08-08 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (16)
URL | Tag | Source |
---|---|---|
http://jwz.livejournal.com/310943.html | X_refsource_misc | |
http://secunia.com/advisories/20224 | Third Party Advisory | |
http://secunia.com/advisories/20226 | Third Party Advisory | |
http://secunia.com/advisories/20456 | Third Party Advisory | |
http://secunia.com/advisories/20782 | Third Party Advisory | |
http://support.avaya.com/elmodocs2/security/ASA-2006-107.htm | X_refsource_confirm | |
http://www.novell.com/linux/download/updates/90_i386.html | X_refsource_confirm | |
http://www.securityfocus.com/bid/9125 | Vdb Entry | |
http://www.vupen.com/english/advisories/2006/1948 | Vdb Entry | |
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=124968 | X_refsource_confirm | |
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=182286 | X_refsource_confirm | |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10848 | Signature |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc | 2017-10-11 | |
http://www.redhat.com/support/errata/RHSA-2006-0498.html | 2017-10-11 | |
https://access.redhat.com/security/cve/CVE-2003-1294 | 2006-05-23 | |
https://bugzilla.redhat.com/show_bug.cgi?id=1617125 | 2006-05-23 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.05_5cl Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.05_5cl" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.05_6 Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.05_6" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.05_6a Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.05_6a" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.05_150 Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.05_150" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.07_2 Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.07_2" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.08_29135cl Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.08_29135cl" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.09_0 Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.09_0" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.10_4 Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.10_4" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.10_6 Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.10_6" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.10_8 Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.10_8" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.10_15 Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.10_15" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.11_0 Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.11_0" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.12_58 Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.12_58" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.12_62 Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.12_62" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.14_0 Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.14_0" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.14_2 Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.14_2" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.14_4 Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.14_4" | - |
Affected
| ||||||
Xscreensaver Search vendor "Xscreensaver" | Xscreensaver Search vendor "Xscreensaver" for product "Xscreensaver" | 4.14_5 Search vendor "Xscreensaver" for product "Xscreensaver" and version "4.14_5" | - |
Affected
|