Lucene search
HistoryAug 18, 2004 - 4:00 a.m.
CVE-2003-0193
msxlsview
xlsview
local users
overwrite
symlink attack
security vulnerability
nvd
cve-2003-0193
6.2 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.3%
msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names (“word$$.html”).
| CPE | Name | Operator | Version |
|---|---|---|---|
| catdoc:catdoc | catdoc | le | 0.91 |
Related
debian
debian
[SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability
2004-10-28 13:58:47
[SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability
2004-10-28 13:58:47
nessus
nessus
Debian DSA-575-1 : catdoc - insecure temporary file
2004-11-10 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability
2004-10-30 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-575-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 575-1 (catdoc)
2008-01-17 00:00:00
osv
osv
catdoc - insecure temporary file
2004-10-28 00:00:00
debiancve
debiancve
CVE-2003-0193
2004-08-18 04:00:00
6.2 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.3%
Related for CVE-2003-0193