PT-2003-1003 · Semi+1 · Semi Mime Library+1

Published 2003-07-10 · Updated 2017-10-11 · CVE-2003-0440

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions semi MIME library version 1.14.5 and earlier wemi versions 1.14.0 and earlier

Description The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files, potentially leading to disruption of confidentiality, integrity, and availability of protected information.

Recommendations For semi MIME library version 1.14.5 and earlier, update to a version later than 1.14.5. For wemi versions 1.14.0 and earlier, update to a version later than 1.14.0. As a temporary workaround, consider restricting access to temporary files to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-01329

CVE-2003-0440

DSA-339

Affected Products

Semi Mime Library

Wemi

References · 11

• http://redhat.com/support/errata/RHSA-2003-231.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2003-0440 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0440 · Vendor Advisory
• http://debian.org/security/2003/dsa-339 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01329 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2003-0440 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2003-234.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0440 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0440 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A569 · Note
• http://debian.org/security/dsa-339 · Note