CVE-2004-0752

OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2004-10-20

Last modified

2024-08-08

Affected products

• Openoffice (Openoffice)

References

• http://marc.info/?l=bugtraq&m=109483308421566&w=2
• http://secunia.com/advisories/12302/
• http://secunia.com/advisories/12546/
• http://secunia.com/advisories/12668/
• http://secunia.com/advisories/12914/
• http://secunia.com/advisories/12932/
• http://securitytracker.com/id?1011205
• http://www.openoffice.org/issues/show_bug.cgi?id=33357
• http://www.osvdb.org/9804
• http://www.redhat.com/support/errata/RHSA-2004-446.html
• http://www.securityfocus.com/bid/11151
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17312
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10294