CVE-2003-1294: Xscreensaver

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xscreensaver-getimage-video, (3) driver/xscreensaver.kss.in, and the (4) vidwhacker and (5) webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack.

Affected products

• Xscreensaver Xscreensaver: version 4.05_5cl only; version 4.05_6 only; version 4.05_6a only; version 4.05_150 only; version 4.07_2 only; version 4.08_29135cl only; …

Published 2003-12-31. Last modified 2026-06-16.