Exploitation Summary
EIP tracks 2 public exploits for CVE-2004-0996. PoCs published by Gangstuck.
AI-analyzed exploit summary This exploit leverages a symbolic link attack in Cscope versions up to 15.5, which creates predictable temporary files in /tmp. By creating malicious symlinks, an attacker can overwrite arbitrary files with the privileges of the user executing Cscope.
Description
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.
Exploits (2)
This exploit leverages a symbolic link attack in Cscope versions up to 15.5, which creates predictable temporary files in /tmp. By creating malicious symlinks, an attacker can overwrite arbitrary files with the privileges of the user executing Cscope.
This exploit leverages a symlink vulnerability in Cscope (versions up to 15.5) to overwrite arbitrary files by predicting temporary file names in /tmp. It brute-forces process IDs to create malicious symlinks that Cscope will follow when executed by an unsuspecting user.