JVNDB-2003-000242

skk Arbitrary Code Execution Vulnerability

skk (Simple Kana to Kanji conversion software) would create an insecure temporary file without taking proper security precautions.

Base Metrics: 4.6 (Medium) [NVD Score]

• Access Vector: Local
• Access Complexity: Low
• Authentication: None
• Confidentiality Impact: Partial
• Integrity Impact: Partial
• Availability Impact: Partial

SKK Openlab

• SKK priort to version 12.1

Red Hat, Inc.

• Red Hat Linux 7.1
• Red Hat Linux 7.1 for zSeries
• Red Hat Linux 7.2
• Red Hat Linux 7.3
• Red Hat Linux 8.0
• Red Hat Linux 9

An local attacker could overwrite arbitrary files.

Please refer to the 'Vendor Information' section for official remediation and take appropriate action.

SKK Openlab

• SKK What's News : 12.1.1 release candidate

Red Hat, Inc.

• Red Hat Security Advisory : RHSA-2003:241

1. CVE-2003-0539

1. National Vulnerability Database (NVD) : CVE-2003-0539
2. SecurityFocus : 8144

[2008/05/21]
  Web page published