CVE Vulnerabilities

CVE-2004-0107

Published: Apr 15, 2004 | Modified: Oct 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.

Affected Software

Name Vendor Start Version End Version
Sysstat Redhat 4.0.7-3 4.0.7-3
Propack Sgi 2.3 2.3
Propack Sgi 2.4 2.4
Sysstat Sysstat 4.0.7 4.0.7
Sysstat Sysstat 4.1.1 4.1.1
Sysstat Sysstat 4.1.2 4.1.2
Sysstat Sysstat 4.1.3 4.1.3
Sysstat Sysstat 4.1.4 4.1.4
Sysstat Sysstat 4.1.5 4.1.5
Sysstat Sysstat 4.1.6 4.1.6
Sysstat Sysstat 4.1.7 4.1.7
Sysstat Sysstat 5.0.1 5.0.1
Red Hat Enterprise Linux 3 RedHat sysstat-0:4.0.7-4.EL3.2 *
Red Hat Linux 9 RedHat sysstat *

References