CVE-2004-0581

ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.

Score

CVSS 2.0 4.6 Medium

Status

Modified - cve@mitre.org

Published

2004-08-06

Last modified

2024-08-08

Affected products

• Ksymoops (Gnu)
• Mandrake Linux (Mandrakesoft)
• Mandrake Linux Corporate Server (Mandrakesoft)

References

• http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:060
• http://www.securityfocus.com/bid/10516
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16392