Vulnerability Details CVE-2000-1156
StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who is using StarOffice.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.9%
CVSS Severity
CVSS v2 Score 3.6
References
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0115.html
- http://www.securityfocus.com/bid/1922
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5487
- http://archives.neohapsis.com/archives/bugtraq/2000-11/0115.html
- http://www.securityfocus.com/bid/1922
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5487
Products affected by CVE-2000-1156
-
cpe:2.3:a:sun:staroffice:5.2