CVE-2004-0108 The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.
MediumCVSS 4.6
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat sysstat | = 4.0.7-3 | No fix listed |
| sgi propack | = 2.3 | No fix listed |
| sgi propack | = 2.4 | No fix listed |
| sysstat | = 4.0.7 | No fix listed |
| sysstat | = 4.1.1 | No fix listed |
| sysstat | = 4.1.2 | No fix listed |
| sysstat | = 4.1.3 | No fix listed |
| sysstat | = 4.1.4 | No fix listed |
| sysstat | = 4.1.5 | No fix listed |
| sysstat | = 4.1.6 | No fix listed |
| sysstat | = 4.1.7 | No fix listed |
| sysstat | = 5.0.1 | No fix listed |
| debian/sysstat(Debian:12) | < 5.0.2-1 | 5.0.2-1 |
| debian/sysstat(Debian:13) | < 5.0.2-1 | 5.0.2-1 |
| debian/sysstat(Debian:14) | < 5.0.2-1 | 5.0.2-1 |
References
- DSA-460 vendor-advisory
- RHSA-2004:053 patch vendor-advisory
- 9844 patch vdb-entry vendor-advisory
- sysstat-isag-symlink(15437) vdb-entry
- Debian Security Tracker CVE-2004-0108 vendor-advisory