CVE-2003-0885

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-12-31 · updated 2026-06-16

Description

Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the (1) apple2, (2) xanalogtv, and (3) pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack.

Affected products

xscreensaver: 4.14

References

http://bugs.gentoo.org/show_bug.cgi?id=41253
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=182286
http://bugs.gentoo.org/show_bug.cgi?id=41253
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=182286

Get alerted when CVE-2003-0885 or the next vulnerability affects your stack