Vulnerability in Ddskk
CVE-2003-0539
skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files.
EPSS: 0.004 (28.4th percentile) — read the EPSS interpretation.
Affected products
- Ddskk — versions 11.6_.rel.0
- Skk — versions 10.62a
- Redhat Daredevil_skk — versions 11.3.2, 11.3.5, 11.6.0-6
- Redhat Ddskk-xemacs — versions 11.6.0-6, 11.6.0-8, 11.6.0-10
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (vendor-advisory, Patch, x_refsource_DEBIAN, Vendor Advisory)
Frequently asked questions
- What is CVE-2003-0539?
- CVE-2003-0539 is a vulnerability in Ddskk. Published 2003-08-18.
- Is CVE-2003-0539 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.