FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0752

This CVE name corresponds to:

Entered	Topic
2004-09-14	openoffice -- document disclosure

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0752 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0752
Phase	Assigned(20040726)

Description

OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users.

References

Source	Reference
BUGTRAQ	20040910 OpenOffice World-Readable Temporary Files Disclose Files to Local Users
CONFIRM	http://www.openoffice.org/issues/show_bug.cgi?id=33357
REDHAT	RHSA-2004:446
BID	11151
OSVDB	9804
OVAL	oval:org.mitre.oval:def:10294
SECTRACK	1011205
SECUNIA	12302
SECUNIA	12546
SECUNIA	12668
SECUNIA	12914
SECUNIA	12932
XF	openofficeorg-tmpfile-insecure-permissions(17312)