Lucene search

[email protected]CVE-2004-0996

HistoryJan 10, 2005 - 5:00 a.m.

CVE-2004-0996

2005-01-1005:00:00

[email protected]

web.nvd.nist.gov

cve

cscope

main.c

symlink attack

file overwrite

security vulnerability

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

0.4%

JSON

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.

Affected configurations

NVD

Node

cscopecscopeMatch13.0

cscopecscopeMatch15.1

cscopecscopeMatch15.3

cscopecscopeMatch15.4

cscopecscopeMatch15.5

Node

debiandebian_linuxMatch3.0

debiandebian_linuxMatch3.0alpha

debiandebian_linuxMatch3.0arm

debiandebian_linuxMatch3.0hppa

debiandebian_linuxMatch3.0ia-32

debiandebian_linuxMatch3.0ia-64

debiandebian_linuxMatch3.0m68k

debiandebian_linuxMatch3.0mips

debiandebian_linuxMatch3.0mipsel

debiandebian_linuxMatch3.0ppc

debiandebian_linuxMatch3.0s-390

debiandebian_linuxMatch3.0sparc

gentoolinux

scounixwareMatch7.1.1

scounixwareMatch7.1.3

scounixwareMatch7.1.4

CPENameOperatorVersion
cscope:cscopecscopeeq13.0
cscope:cscopecscopeeq15.1
cscope:cscopecscopeeq15.3
cscope:cscopecscopeeq15.4
cscope:cscopecscopeeq15.5