CVE-2014-1935

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2014/02/11/1Mailing List, Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737206Exploit, Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2014-1935Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/02/11/1Mailing List, Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737206Exploit, Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2014-1935Third Party Advisory

Timeline

Published: Nov 21, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-19367.5rc before 1.7.1-5 insecurely creates temporary files.CVE-2014-19377.5Gamera before 3.4.1 insecurely creates temporary files.CVE-2014-19385.5python-rply before 0.7.4 insecurely creates temporary files.CVE-2014-19397.5java/android/webkit/BrowserFrame.java in Android before 4.4 uses the addJavascriptInterface API in conjunction with creating an object of th CVE-2014-19424.3Cross-site scripting (XSS) vulnerability in aal/loginverification.aspx in Pearson eSIS Enterprise Student Information System allows remote a CVE-2014-19435.0Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) CVE-2014-19444.3Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the CVE-2014-19457.5SQL injection vulnerability in ajax_udf.php in OpenDocMan before 1.2.7.2 allows remote attackers to execute arbitrary SQL commands via the a CVE-2014-19468.8OpenDocMan 1.2.7 and earlier does not properly validate allowed actions, which allows remote authenticated users to bypass an intended acces CVE-2014-19477.8Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause CVE-2014-19482.6OpenStack Image Registry and Delivery Service (Glance) 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swif CVE-2014-19497.2GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers t