CVE-2003-0193

EPSS 0.14%

catdoc - insecure temporary file

Published: 8/18/2004Modified: 4/28/2026

Also known as:DEBIAN-CVE-2003-0193

Description

msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names ("word$$.html").

Affected packages (2)

Debian/catdocfrom 0, < 0.91.5-2
Debian/catdocfrom 0, < 0.91.5-1.woody3

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2003-0193