Vulnerability in GNU Ksymoops

CVE-2004-0581

ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.

EPSS: 0.004 (29.9th percentile) — read the EPSS interpretation.

Affected products

Gnu Ksymoops — versions 2.4.5, 2.4.8, 2.4.9
Mandrakesoft Mandrake_linux — versions 9.1, 9.2, 10.0
Mandrakesoft Mandrake_linux_corporate_server — versions 2.1
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)