CVE-2004-0372

Description

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/15564

http://www.securityfocus.com/bid/9939

http://www.debian.org/security/2004/dsa-477

http://security.gentoo.org/glsa/glsa-200404-20.xml

http://marc.info/?l=bugtraq&m=107997911025558&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS