CVE-2004-0108: Medium severity sysstat sysstat vulnerability
Published Apr 15, 2004
·Updated
The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.
Affected Software
12 affected components
redhat Sysstat=4.0.7-3
SGI ProPack=2.3
SGI ProPack=2.4
sysstat sysstat=4.0.7
sysstat sysstat=4.1.1
sysstat sysstat=4.1.2
sysstat sysstat=4.1.3
sysstat sysstat=4.1.4
sysstat sysstat=4.1.5
sysstat sysstat=4.1.6
sysstat sysstat=4.1.7
sysstat sysstat=5.0.1
Remediation
Patch Available
Patch Available
Event History
Apr 15, 2004
CVE Published
04:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0108?
CVE-2004-0108 is classified as a medium severity vulnerability that allows local users to perform a symlink attack.
2
How do I fix CVE-2004-0108?
To fix CVE-2004-0108, ensure you are using a patched version of the sysstat utility that eliminates temporary file handling issues.
3
Which versions of sysstat are affected by CVE-2004-0108?
CVE-2004-0108 affects sysstat versions 4.0.7 to 5.0.1 and specific versions in the 4.1.x series.
4
What type of attack is possible with CVE-2004-0108?
CVE-2004-0108 allows local users to overwrite arbitrary files through a symlink attack on temporary files.
5
Is user authentication required to exploit CVE-2004-0108?
No, CVE-2004-0108 can be exploited by any local user without special permissions.