Vulnerability Name: | CVE-2004-0689 (CCN-16963) | ||||||||||||||||||||
Assigned: | 2004-08-11 | ||||||||||||||||||||
Published: | 2004-08-11 | ||||||||||||||||||||
Updated: | 2017-10-11 | ||||||||||||||||||||
Summary: | KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files. | ||||||||||||||||||||
CVSS v3 Severity: | 4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L)
| ||||||||||||||||||||
CVSS v2 Severity: | 4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||||||||||||||
Vulnerability Type: | CWE-Other | ||||||||||||||||||||
Vulnerability Consequences: | File Manipulation | ||||||||||||||||||||
References: | Source: MITRE Type: CNA CVE-2004-0689 Source: CONECTIVA Type: UNKNOWN CLA-2004:864 Source: CCN Type: Conectiva Linux Security Announcement CLSA-2004:864 Fix for multiple security vulnerabilities Source: BUGTRAQ Type: UNKNOWN 20040811 KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities Source: CCN Type: RHSA-2004-412 kdelibs Source: CCN Type: SA12276 KDE Insecure Temporary File Creation Vulnerability Source: SECUNIA Type: Patch, Vendor Advisory 12276 Source: GENTOO Type: Patch, Vendor Advisory 200408-13 Source: CCN Type: Slackware Security Advisories Fri, 3 Sep 2004 22:01:35 -0700 (PDT) [slackware-security] kde (SSA:2004-247-01) Source: DEBIAN Type: Patch, Vendor Advisory DSA-539 Source: DEBIAN Type: DSA-539 kdelibs -- temporary directory vulnerability Source: CCN Type: KDE Security Advisory 20040811-1 Temporary Directory Vulnerability Source: CONFIRM Type: Patch, Vendor Advisory http://www.kde.org/info/security/advisory-20040811-1.txt Source: CCN Type: BID-10922 KDE Insecure Temporary Directory Symlink Vulnerability Source: XF Type: UNKNOWN kde-application-symlink(16963) Source: XF Type: UNKNOWN kde-application-symlink(16963) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:9334 | ||||||||||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration RedHat 1: ![]() | ||||||||||||||||||||
Oval Definitions | |||||||||||||||||||||
| |||||||||||||||||||||
BACK |