CVE:CVE-2004-0996
CNNVD:CNNVD-200501-203
Cscope是一个开源的文本模式浏览器。
Cscope 15-4及15-5中main.c由于设计问题，存在任意文件覆盖漏洞。
由于main.c在创见临时文件时采用可预测的文件名，本地用户可以利用此漏洞，采用链接方式，对任意文件进行覆盖。
solution:Upgrade cscope cscope to a higher version than 13.0,15.1,15.3,15.4,15.5,and avoid the version 13.0,15.1,15.3,15.4,15.5; Upgrade debian debian_linux to a higher version than 3.0,and avoid the version 3.0; Upgrade gentoo linux to a higher version than *; Upgrade sco unixware to a higher version than 7.1.1,7.1.3,7.1.4,and avoid the version 7.1.1,7.1.3,7.1.4