CVE-2004-0404 logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.
LowCVSS 1.2
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| psionic logcheck | <= 1.1.0 | No fix listed |
| debian/logcheck(Debian:12) | < 1.1.1-13.2 | 1.1.1-13.2 |
| debian/logcheck(Debian:13) | < 1.1.1-13.2 | 1.1.1-13.2 |
| debian/logcheck(Debian:14) | < 1.1.1-13.2 | 1.1.1-13.2 |
References
- 11399 third-party-advisory vendor-advisory
- DSA-488 patch vendor-advisory
- MDKSA-2004:155 vendor-advisory
- 10162 patch vdb-entry
- logcheck-directory-symlink(15888) vdb-entry
- Debian Security Tracker CVE-2004-0404 vendor-advisory