← Back

Noweb

noweb

Vendor: Norman Ramsey • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2005-3342
1Norman Ramsey
1Noweb
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
1.2 LOW· v2
noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in (1) lib/toascii.nw and (2) shell/roff.mm.
CVE-2003-0381
1Norman Ramsey
1Noweb
Apr 16, 2026
Jul 24, 2003
N/A· v4
N/A· v3
2.1 LOW· v2
Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the noroff script.