CVE-2001-0890: Sane

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files.

Affected products

• Sane Sane: version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.4 only; version 1.0.5 only; …

Published 2001-12-11. Last modified 2026-06-16.