CVE-2003-1294

no score yetEPSS 0.4%

Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack.

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
Published: 2003-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

xscreensaver:xscreensaver

References

ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc
http://jwz.livejournal.com/310943.html
http://secunia.com/advisories/20224
http://secunia.com/advisories/20226
http://secunia.com/advisories/20456

Check your stack JSON