CVE-2014-2893

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.

• CWE-59

• http://lists.opensuse.org/opensuse-updates/2015-02/msg00038.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2014/04/16/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/04/20/1Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=744817Issue Tracking, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2015-02/msg00038.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2014/04/16/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2014/04/20/1Mailing List, Third Party Advisory
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=744817Issue Tracking, Third Party Advisory

Published

Apr 23, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-2887Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-2888lib/sfpagent/bsig.rb in the sfpagent gem before 0.4.15 for R…
• CVE-2014-2889Off-by-one error in the bpf_jit_compile function in arch/x86…
• CVE-2014-2890Cross-site scripting (XSS) vulnerability in the wrap_html fu…
• CVE-2014-2891strongSwan before 5.1.2 allows remote attackers to cause a d…
• CVE-2014-2892Heap-based buffer overflow in the get_answer function in mms…
• CVE-2014-2894Off-by-one error in the cmd_smart function in the smart self…
• CVE-2014-2895Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-2896The DoAlert function in the (1) TLS and (2) DTLS implementat…9.8
• CVE-2014-2897The SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before …9.8
• CVE-2014-2898wolfSSL CyaSSL before 2.9.4 allows remote attackers to have …9.8
• CVE-2014-2899wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause…