CVE-2003-1294: Xscreensaver before 4.15 creates temporary files insecurely in (1) driver/passwd-kerberos.c, (2) driver/xsc...

Security readout for executives and security teams

CVE-2003-1294 is an old Xscreensaver issue where temporary files were created unsafely before version 4.15. A local user could abuse that behavior to overwrite files through symbolic links. The source bundle does not provide CVSS, CWE, or confirmed modern exploitation evidence. Exposure is mainly legacy Unix or Linux environments where Xscreensaver older than 4.15 remains installed. Risk depends on local user access and how the affected components run. The bundle does not identify specific currently supported affected products. Treat this as a legacy hygiene issue unless vulnerable systems still allow local users. Prioritize shared workstations, multi-user servers with graphical packages, and unsupported systems where old Xscreensaver packages may persist. Mitigation focus: Inventory systems with Xscreensaver installed and record package versions.; Upgrade Xscreensaver to 4.15 or later where applicable.; Apply vendor package updates from relevant distribution advisories..

Prepared

Jun 29, 2026, 22:58 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.