Lucene search

K
cve[email protected]CVE-2004-0422
HistoryJul 07, 2004 - 4:00 a.m.

CVE-2004-0422

2004-07-0704:00:00
NVD-CWE-Other
web.nvd.nist.gov
19
security vulnerability
cve-2004-0422
flim before 1.14.3
symlink attack
nvd

6.1 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.3%

flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack.

CPENameOperatorVersion
gnu:flimgnu flimle1.14.2

6.1 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.3%