Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Opt

Pesquisador deSTG Security
#53358de 53,622
2.1CVSS total
Vulnerabilidades · 1
PT-2004-2002
2.1
2004-12-01
Cscope · Cscope · CVE-2004-0996
Name of the Vulnerable Software and Affected Versions: cscope versions 15-4 through 15-5 Description: The issue allows local users to overwrite arbitrary files via a symlink attack due to the creation of temporary files with predictable filenames in the main.c file of the affected software. Recommendations: For cscope versions 15-4 through 15-5, consider updating to a version where this issue is resolved, or as a temporary workaround, restrict access to the temporary file creation functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.