The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.
References
Link | Resource |
---|---|
http://www.redhat.com/support/errata/RHSA-2004-053.html | Patch Vendor Advisory |
ftp://patches.sgi.com/support/free/security/advisories/20040302-01-U.asc | Patch |
http://www.securityfocus.com/bid/9844 | Patch Vendor Advisory |
http://www.debian.org/security/2004/dsa-460 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/15437 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2004-04-14 21:00
Updated : 2017-10-09 18:30
NVD link : CVE-2004-0108
Mitre link : CVE-2004-0108
JSON object : View
CWE
Products Affected
sgi
- propack
redhat
- sysstat
sysstat
- sysstat