| Package | Affected versions | Patched versions |
|---|---|---|
| xscreensaver | = 4.05_150= 4.05_5cl= 4.05_6= 4.05_6a= 4.07_2= 4.08_29135cl= 4.09_0= 4.10_15= 4.10_4= 4.10_6= 4.10_8= 4.11_0= 4.12_58= 4.12_62= 4.14_0= 4.14_2= 4.14_4= 4.14_5 |
Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free