Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Opt

Researcher fromSTG Security
#53358of 53,619
2.1Total CVSS
Vulnerabilities · 1
PT-2004-2002
2.1
2004-12-01
Cscope · Cscope · CVE-2004-0996
Name of the Vulnerable Software and Affected Versions: cscope versions 15-4 through 15-5 Description: The issue allows local users to overwrite arbitrary files via a symlink attack due to the creation of temporary files with predictable filenames in the main.c file of the affected software. Recommendations: For cscope versions 15-4 through 15-5, consider updating to a version where this issue is resolved, or as a temporary workaround, restrict access to the temporary file creation functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.