CVEvulnerability

CVE-2003-1294

2.1 LOW Published 2003-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N

Description

Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack.

Affected configurations

• xscreensaver xscreensaver 4.05 5cl • xscreensaver xscreensaver 4.05 6 • xscreensaver xscreensaver 4.05 6a • xscreensaver xscreensaver 4.05 150 • xscreensaver xscreensaver 4.07 2 • xscreensaver xscreensaver 4.08 29135cl • xscreensaver xscreensaver 4.09 0 • xscreensaver xscreensaver 4.10 4 • xscreensaver xscreensaver 4.10 6 • xscreensaver xscreensaver 4.10 8 • xscreensaver xscreensaver 4.10 15 • xscreensaver xscreensaver 4.11 0 • xscreensaver xscreensaver 4.12 58 • xscreensaver xscreensaver 4.12 62 • xscreensaver xscreensaver 4.14 0 • xscreensaver xscreensaver 4.14 2 • xscreensaver xscreensaver 4.14 4 • xscreensaver xscreensaver 4.14 5

References