CVEvulnerability
CVE-2004-0966
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2005-02-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
Affected configurations
• gnu gettext 0.14.1
• ubuntu ubuntu linux 4.1
References
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136323 bugzilla.redhat.com
- http://marc.info/?l=bugtraq&m=110382652226638&w=2 marc.info
- http://www.gentoo.org/security/en/glsa/glsa-200410-10.xml www.gentoo.org
- http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00000.html www.redhat.com
- http://www.securityfocus.com/bid/11282 Patch, Vendor Advisory
- http://www.trustix.org/errata/2004/0050 www.trustix.org
- http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:051 wwwnew.mandriva.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 exchange.xforce.ibmcloud.com
- https://www.ubuntu.com/usn/usn-5-1/ www.ubuntu.com
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136323 bugzilla.redhat.com
- http://marc.info/?l=bugtraq&m=110382652226638&w=2 marc.info
- http://www.gentoo.org/security/en/glsa/glsa-200410-10.xml www.gentoo.org
- http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00000.html www.redhat.com
- http://www.securityfocus.com/bid/11282 Patch, Vendor Advisory
- http://www.trustix.org/errata/2004/0050 www.trustix.org
- http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:051 wwwnew.mandriva.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 exchange.xforce.ibmcloud.com
- https://www.ubuntu.com/usn/usn-5-1/ www.ubuntu.com