CVE-2003-0603

Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to overwrite arbitrary files via a symlink attack on temporary files that are created in directories with group-writable or world-writable permissions.

Scoring

CVSS base score
0
EPSS probability
0.09%
Published
2003-07-29
Last modified
2026-03-16

Affected products

Markdown version · Browse all CVEs