CVE-2003-0193

Summary

msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names ("word$$.html").

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.osvdb.org/11193
• http://www.securityfocus.com/bid/11560
• http://secunia.com/advisories/13021/
• http://secunia.com/advisories/13022/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16335
• http://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=183525
• http://www.debian.org/security/2004/dsa-575

References

• http://www.osvdb.org/11193
• http://www.securityfocus.com/bid/11560
• http://secunia.com/advisories/13021/
• http://secunia.com/advisories/13022/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16335
• http://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=183525
• http://www.debian.org/security/2004/dsa-575

• ←Previous
• Next→