CVE-2003-0603: Mozilla Bugzilla

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to overwrite arbitrary files via a symlink attack on temporary files that are created in directories with group-writable or world-writable permissions.

Affected products

• Mozilla Bugzilla: version 2.10 only; version 2.12 only; version 2.14 only; version 2.14.1 only; version 2.14.2 only; version 2.14.3 only; …

Published 2003-08-27. Last modified 2026-06-16.