NetSight
IP …
low2.1Public exploit code

CVE-2004-0996

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.

Affected products

VendorProductAffected versions
CscopeCscope
Versions 13.0, 15.1, 15.3, 15.4, 15.5
DebianDebian Linux
Version 3.0
GentooLinux
All versions
ScoUnixware
Versions 7.1.1, 7.1.3, 7.1.4

References