CVE-2004-0974

The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2005-02-09

Last modified

2024-08-08

Affected products

• Mandrake Linux (Mandrakesoft)
• Mandrake Linux Corporate Server (Mandrakesoft)
• Open Source Apple File Share Protocol Suite (Netatalk)
• Fedora Core (Redhat)

References

• http://www.gentoo.org/security/en/glsa/glsa-200410-25.xml
• http://www.trustix.org/errata/2004/0050
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17583