CVE-2003-0596 Race condition in n/a
Local attackers can read or modify other users' files by exploiting predictable temporary directory names in FDclone.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2003-0596?
CVE-2003-0596 is a low-severity vulnerability in n/a, published on 25 Jul 2003. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
FDclone 2.00a, and other versions before 2.02a, creates temporary directories with predictable names and uses them if they already exist, which allows local users to read or modify files of other fdclone users by creating the directory ahead of time.
Which versions are affected by CVE-2003-0596?
It affects 1 product.
Products include Fdclone Fdclone.
How do I fix CVE-2003-0596?
Upgrade to a fixed version.
Is CVE-2003-0596 being exploited?
There is no known exploitation of CVE-2003-0596 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2003-0596, DSA-352, GHSA-3gjm-xjgf-753r.