CVE-2004-0752 - OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup,

CVE-2004-0752

Summary

OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users.

References

Vulnerable Configurations

cpe:2.3:a:openoffice:openoffice:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:openoffice:openoffice:1.1.2:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 11-10-2017 - 01:29)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:N/A:N

oval via4

accepted

2013-04-29T04:04:22.749-04:00

class

vulnerability

contributors

name Aharon Chernin
organization SCAP.com, LLC
name Dragos Prisaca
organization G2, Inc.

definition_extensions

comment The operating system installed on the system is Red Hat Enterprise Linux 3
oval oval:org.mitre.oval:def:11782
comment CentOS Linux 3.x
oval oval:org.mitre.oval:def:16651

description

OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users.

family

unix

oval:org.mitre.oval:def:10294

status

accepted

submitted

2010-07-09T03:56:16-04:00

title

OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users.

version

redhat via4

advisories

rhsa

id	RHSA-2004:446

rpms

openoffice.org-0:1.1.0-16.14.EL
openoffice.org-debuginfo-0:1.1.0-16.14.EL
openoffice.org-i18n-0:1.1.0-16.14.EL
openoffice.org-libs-0:1.1.0-16.14.EL

refmap via4

bid	11151
bugtraq	20040910 OpenOffice World-Readable Temporary Files Disclose Files to Local Users
confirm	http://www.openoffice.org/issues/show_bug.cgi?id=33357
osvdb	9804
sectrack	1011205
secunia	12302 12546 12668 12914 12932
xf	openofficeorg-tmpfile-insecure-permissions(17312)

Last major update

11-10-2017 - 01:29

Published

20-10-2004 - 04:00

Last modified

11-10-2017 - 01:29