CVE-2004-0996

This exploit leverages a symbolic link attack in Cscope versions up to 15.5, which creates predictable temporary files in /tmp. By creating malicious symlinks, an attacker can overwrite arbitrary files with the privileges of the user executing Cscope.

This exploit leverages a symlink vulnerability in Cscope (versions up to 15.5) to overwrite arbitrary files by predicting temporary file names in /tmp. It brute-forces process IDs to create malicious symlinks that Cscope will follow when executed by an unsuspecting user.