Unscored CVE-2003-0539 EUVD-2003-0533GHSA-qhgq-xgj5-qr7f

skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecu…

Published Jul 10, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	ddskk	12.1.cvs.20030622-1	—
Debian 13	ddskk	12.1.cvs.20030622-1	—
Debian 12	ddskk	12.1.cvs.20030622-1	—
Debian 3.0	ddskk	11.6.rel.0-2woody1	DSA-343
Debian 3.0	skk	10.62a-4woody1	DSA-343

Advisories 1

DSA-343 skk, ddskk - insecure temporary file Debian Security (DSA / DLA) · Mar 9, 2026

References

oval:org.mitre.oval:def:28 vdb-entry signature
RHSA-2003:242 vendor-advisory
DSA-343 vendor-advisory