Unscored CVE-2003-0440 EUVD-2003-0434GHSA-wxg6-2r9f-5wx2

The (1) semi MIME library 1.14.5 and earlier, and (2) wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary fi…

Published Jul 10, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

The (1) semi MIME library 1.14.5 and earlier, and (2) wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	semi	1.14.5+20030609-1	—
Debian 13	semi	1.14.5+20030609-1	—
Debian 12	semi	1.14.5+20030609-1	—
Debian 3.0	semi	1.14.3.cvs.2001.08.10-1woody2	DSA-339
Debian 3.0	wemi	1.14.0.20010802wemiko-1.3	DSA-339

Advisories 1

DSA-339 semi - insecure temporary file Debian Security (DSA / DLA) · Mar 9, 2026

References

oval:org.mitre.oval:def:569 vdb-entry signature
RHSA-2003:231 vendor-advisory
DSA-339 vendor-advisory
RHSA-2003:234 vendor-advisory