low2.1
CVE-2004-0372
xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check s…
Impact
xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xine | Xine | Versions 0.9.13, 1_beta1, 1_beta2, 1_beta3, 1_beta4, 1_beta5 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107997911025558&w=2
- http://security.gentoo.org/glsa/glsa-200404-20.xml
- http://www.debian.org/security/2004/dsa-477
- http://www.securityfocus.com/bid/9939
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15564
- http://marc.info/?l=bugtraq&m=107997911025558&w=2
- http://security.gentoo.org/glsa/glsa-200404-20.xml
- http://www.debian.org/security/2004/dsa-477
- http://www.securityfocus.com/bid/9939
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15564