Vulnerability in Esearch Emerge Search Tool
CVE-2004-0655
eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file.
EPSS: 0.003 (26.2th percentile) — read the EPSS interpretation.
Affected products
- Esearch Emerge_search_tool — versions 0.3.1, 0.4, 0.4.1
- N/a — versions n/a
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_GENTOO, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)