CVE-2003-1139 Information

Description

Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file.

Reference

http://archives.neohapsis.com/archives/vulnwatch/2003-q4/0021.html http://secunia.com/advisories/10104 http://securitytracker.com/id?1008014 http://www.securityfocus.com/archive/1/342476 http://www.securityfocus.com/bid/8899 https://exchange.xforce.ibmcloud.com/vulnerabilities/13520