CVEvulnerability

CVE-2004-0372

2.1 LOW Published 2004-04-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-04-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N

Description

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.

Affected configurations

• xine xine 0.9.13 • xine xine 1 beta1 • xine xine 1 beta2 • xine xine 1 beta3 • xine xine 1 beta4 • xine xine 1 beta5 • xine xine 1 beta6 • xine xine 1 beta7 • xine xine 1 beta8 • xine xine 1 beta9 • xine xine 1 beta10 • xine xine 1 beta11 • xine xine 1 beta12 • xine xine 1 rc0a • xine xine 1 rc1 • xine xine 1 rc2 • xine xine 1 rc3 • xine xine 1 rc3a • xine xine 1 rc3b

References