Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/archive/1/342476 | Exploit Vendor Advisory |
| http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0021.html | |
| http://www.securityfocus.com/bid/8899 | Exploit Vendor Advisory |
| http://secunia.com/advisories/10104 | Vendor Advisory |
| http://securitytracker.com/id?1008014 | Exploit Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/13520 |
Configurations
Information
Published : 2003-10-26 21:00
Updated : 2017-07-10 18:29
NVD link : CVE-2003-1139
Mitre link : CVE-2003-1139
JSON object : View
CWE
Products Affected
musicqueue
- musicqueue


