CVE-2003-0596

FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdclone users by creating the directory ahead of time.

🔗 References (4)

• cve@mitrehttp://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=186219
• cve@mitrehttps://www.debian.org/security/2003/dsa-352
• af854a3a-2127-422b-91ae-364da2661108http://bugs.debian.org/cgi-bin/bugreport.cgi?archive=no&bug=186219
• af854a3a-2127-422b-91ae-364da2661108https://www.debian.org/security/2003/dsa-352