CVE-2004-0974: Low severity netatalk open source apple file share protocol suite vulnerability
Published Oct 20, 2004
·Updated
The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
Affected Software
13 affected components
Netatalk Open Source Apple File Share Protocol Suite=1.6.4
Netatalk Open Source Apple File Share Protocol Suite=1.5_pre6
Netatalk Open Source Apple File Share Protocol Suite=1.6.1
redhat Fedora Core=core_2.0
Mandrakesoft Mandrake Linux Corporate Server=2.1
Mandrakesoft Mandrake Linux=9.2
Mandrakesoft Mandrake Linux=10.1
Mandrakesoft Mandrake Linux=9.2
Mandrakesoft Mandrake Linux=10.0
redhat Fedora Core=core_3.0
Mandrakesoft Mandrake Linux Corporate Server=2.1
Mandrakesoft Mandrake Linux=10.0
Mandrakesoft Mandrake Linux=10.1
Remediation
Patch Available
Event History
Oct 20, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0974?
CVE-2004-0974 is considered a moderate severity vulnerability due to its potential for local users to overwrite files.
2
How do I fix CVE-2004-0974?
To fix CVE-2004-0974, users should update the netatalk package to the latest version that addresses this vulnerability.
3
Who is affected by CVE-2004-0974?
CVE-2004-0974 affects local users of Trustix Secure Linux and several versions of the netatalk package.
4
What type of attack is associated with CVE-2004-0974?
CVE-2004-0974 is associated with a symlink attack that allows local users to overwrite temporary files.
5
Is CVE-2004-0974 a remote or local vulnerability?
CVE-2004-0974 is a local vulnerability, meaning it can only be exploited by users with access to the affected system.