CVEvulnerability
CVE-2004-0974
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2005-02-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
Affected configurations
• netatalk open source apple file share protocol suite 1.5 pre6
• netatalk open source apple file share protocol suite 1.6.1
• netatalk open source apple file share protocol suite 1.6.4
• mandrakesoft mandrake linux 9.2
• mandrakesoft mandrake linux 10.0
• mandrakesoft mandrake linux 10.1
• mandrakesoft mandrake linux corporate server 2.1
• redhat fedora core core 2.0
• redhat fedora core core 3.0
References
- http://www.gentoo.org/security/en/glsa/glsa-200410-25.xml Patch, Vendor Advisory
- http://www.trustix.org/errata/2004/0050 www.trustix.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 exchange.xforce.ibmcloud.com
- http://www.gentoo.org/security/en/glsa/glsa-200410-25.xml Patch, Vendor Advisory
- http://www.trustix.org/errata/2004/0050 www.trustix.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 exchange.xforce.ibmcloud.com