CVE-2003-0381 : Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecu

Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the noroff script.

Published 2003-07-24 04:00:00

Updated 2008-09-05 20:34:11

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2003-0381

Norman Ramsey » Noweb
Versions up to, including, (<=) 2.9
cpe:2.3:a:norman_ramsey:noweb:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2003-0381

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2003-0381

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:P/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

References for CVE-2003-0381

http://www.debian.org/security/2003/dsa-323

Debian -- The Universal Operating System
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2003-0381

Products affected by CVE-2003-0381

Exploit prediction scoring system (EPSS) score for CVE-2003-0381

CVSS scores for CVE-2003-0381

References for CVE-2003-0381