Vulnerability in Mozilla Bugzilla

CVE-2003-0603

Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to overwrite arbitrary files via a symlink attack on temporary files that are created in directories with group-writable or world-writable permissions.

EPSS: 0.003 (21.7th percentile) — read the EPSS interpretation.

Affected products

Mozilla Bugzilla — versions 2.10, 2.12, 2.14
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, x_refsource_CONECTIVA, Vendor Advisory)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM)