CVE-2003-0539

MEDIUM 4.6CVE-2003-0539 · Published 18/08/2003 · updated 16/06/2026

In short

CVE-2003-0539 is a MEDIUM (CVSS 4.6) vulnerability affecting ddskk (ddskk), daredevil skk (redhat), ddskk-xemacs (redhat).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 29.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ddskk ddskk	`= 11.6_.rel.0`	No fix yet
daredevil skk redhat	`= 11.3.2= 11.3.5= 11.6.0-10= 11.6.0-6= 11.6.0-8`	No fix yet
ddskk-xemacs redhat	`= 11.6.0-10= 11.6.0-6= 11.6.0-8`	No fix yet
skk skk	`= 10.62a`	No fix yet

Description

skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files.

References

debian.org/security/2003/dsa-343 · Patch
redhat.com/support/errata/RHSA-2003-242.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A28

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free