Bug 63541 (CVE-2004-0996) - VUL-0: CVE-2004-0996: cscope: insecure tmp file handling
Summary: VUL-0: CVE-2004-0996: cscope: insecure tmp file handling
Status: RESOLVED FIXED
Alias: CVE-2004-0996
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: All Linux
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Lukas Tinkl
QA Contact: Security Team bot
URL:
Whiteboard: CVE-2004-0996: CVSS v2 Base Score: 2....
Keywords:
Depends on:
Blocks:
 
Reported: 2004-11-25 19:57 UTC by Thomas Biege
Modified: 2021-10-27 15:19 UTC (History)
1 user (show)

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
patch.CAN-2004-0996.cscope (1.68 KB, patch)
2004-11-25 19:58 UTC, Thomas Biege 		Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Thomas Biege 2004-11-25 19:57:24 UTC 
Hi Likas, 
please have a look at: 
http://lists.netsys.com/pipermail/full-disclosure/2004-November/029341.html 
 
CAN-2004-0996 
 
A fix in STABLE is sufficient. 
 
I'll attach the patch in a few minutes.
Comment 1 Thomas Biege 2004-11-25 19:57:24 UTC 
<!-- SBZ_reproduce  -->
-
Comment 2 Thomas Biege 2004-11-25 19:58:47 UTC 
Created attachment 26450 [details]
patch.CAN-2004-0996.cscope
Comment 3 Lukas Tinkl 2004-11-29 20:52:23 UTC 
Package submitted
Comment 4 Marcus Meissner 2004-11-30 00:50:20 UTC 
-vul-0: since only stable needs it.
Comment 5 Thomas Biege 2004-12-14 19:48:54 UTC 
ok it is in the stable package.. will set to FIXED
Comment 6 Thomas Biege 2009-10-13 20:00:38 UTC 
CVE-2004-0996: CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)