CVE-2003-0656

eroaster before 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file that is used as a lockfile.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2003-08-27

Last modified

2024-08-08

Affected products

• Eroaster (Eroaster)

References

• http://marc.info/?l=bugtraq&m=106252649028401&w=2
• http://www.debian.org/security/2003/dsa-366
• http://www.mandriva.com/security/advisories?name=MDKSA-2003:083