CVE-2004-0996

Fixed in a distro release EPSS 1%

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.

Published 2004-12-01 · CVE record · OSV

Products: cscope, debian_linux, gentoo linux, sco unixware

Distro releases