First published: Tue Mar 16 2004(Updated: )
The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sysstat | =4.1.5 | |
Sysstat | =4.1.3 | |
Sysstat | =4.1.6 | |
Sysstat | =4.1.2 | |
Sysstat | =4.0.7 | |
Sysstat | =4.1.1 | |
Sysstat | =5.0.1 | |
Sysstat | =4.0.7-3 | |
SGI ProPack | =2.3 | |
Sysstat | =4.1.7 | |
SGI ProPack | =2.4 | |
Sysstat | =4.1.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-0107 has a moderate severity rating due to its potential for local file overwrite vulnerabilities.
To fix CVE-2004-0107, upgrade to sysstat version 4.1.0 or later.
CVE-2004-0107 affects sysstat versions 4.0.7 and earlier, as well as specific versions of SGI ProPack.
CVE-2004-0107 involves symlink attacks on temporary files allowing local users to overwrite arbitrary files.
No, CVE-2004-0107 is classified as a local vulnerability, meaning it can only be exploited by local users.