CVEvulnerability

CVE-2004-0972

2.1 LOW Published 2005-02-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-02-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N

Description

The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

Affected configurations

• lvm logical volume management utilities 1.0.1 • lvm logical volume management utilities 1.0.4 • lvm logical volume management utilities 1.0.7 • lvm logical volume management utilities 1.0.8 • gentoo linux

References