CVE-2004-0581: Medium severity GNU Ksymoops vulnerability
Published Jun 23, 2004
·Updated
ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.
Affected Software
11 affected components
GNU Ksymoops=2.4.5
GNU Ksymoops=2.4.8
GNU Ksymoops=2.4.9
Mandrakesoft Mandrake Linux Corporate Server=2.1
Mandrakesoft Mandrake Linux=9.2
Mandrakesoft Mandrake Linux=9.2
Mandrakesoft Mandrake Linux=9.1
Mandrakesoft Mandrake Linux=10.0
Mandrakesoft Mandrake Linux=9.1
Mandrakesoft Mandrake Linux Corporate Server=2.1
Mandrakesoft Mandrake Linux=10.0
Remediation
Patch Available
Event History
Jun 23, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What type of attack is described in CVE-2004-0581?
CVE-2004-0581 describes a symlink attack that allows local users to delete arbitrary files.
2
What systems are affected by CVE-2004-0581?
CVE-2004-0581 affects Mandrake Linux versions 9.1 through 10.0, and Corporate Server 2.1 with specific GNU ksymoops versions.
3
What is the severity level of CVE-2004-0581?
CVE-2004-0581 is classified as having a moderate severity level due to its impact on local user access.
4
How can I mitigate the risks associated with CVE-2004-0581?
To mitigate CVE-2004-0581, users should ensure they upgrade to patched versions of GNU ksymoops and secure /tmp permissions.
5
When was CVE-2004-0581 published?
CVE-2004-0581 was published in 2004, highlighting vulnerabilities in older versions of Mandrake Linux.