medium5.0Public exploit code
CVE-2003-1139
Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.cras…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Musicqueue 1.2 - SIGSEGV Signal Handler Insecure File Creation2003-10-27 · local · linux · Verified
Impact
Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Musicqueue | Musicqueue | Version 1.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0021.html
- http://secunia.com/advisories/10104
- http://securitytracker.com/id?1008014
- http://www.securityfocus.com/archive/1/342476
- http://www.securityfocus.com/bid/8899
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13520
- http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0021.html
- http://secunia.com/advisories/10104
- http://securitytracker.com/id?1008014
- http://www.securityfocus.com/archive/1/342476
- http://www.securityfocus.com/bid/8899
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13520