Vulnerability in Sgi Propack
CVE-2004-0108
The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.
EPSS: 0.004 (28.6th percentile) — read the EPSS interpretation.
Affected products
- Sgi Propack — versions 2.3, 2.4
- Sysstat — versions 4.0.7, 4.1.1, 4.1.2
- Redhat Sysstat — versions 4.0.7-3
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)