ID CVE-2004-0752
Summary OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users.
References
Vulnerable Configurations
  • cpe:2.3:a:openoffice:openoffice:1.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:openoffice:openoffice:1.1.2:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 11-10-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
oval via4
accepted 2013-04-29T04:04:22.749-04:00
class vulnerability
contributors
  • name Aharon Chernin
    organization SCAP.com, LLC
  • name Dragos Prisaca
    organization G2, Inc.
definition_extensions
  • comment The operating system installed on the system is Red Hat Enterprise Linux 3
    oval oval:org.mitre.oval:def:11782
  • comment CentOS Linux 3.x
    oval oval:org.mitre.oval:def:16651
description OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users.
family unix
id oval:org.mitre.oval:def:10294
status accepted
submitted 2010-07-09T03:56:16-04:00
title OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users.
version 23
redhat via4
advisories
rhsa
id RHSA-2004:446
refmap via4
bid 11151
bugtraq 20040910 OpenOffice World-Readable Temporary Files Disclose Files to Local Users
confirm http://www.openoffice.org/issues/show_bug.cgi?id=33357
osvdb 9804
sectrack 1011205
secunia
  • 12302
  • 12546
  • 12668
  • 12914
  • 12932
xf openofficeorg-tmpfile-insecure-permissions(17312)
Last major update 11-10-2017 - 01:29
Published 20-10-2004 - 04:00
Back to Top