CVE-2004-0581 ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.
MediumCVSS 4.6
EPSS 0.37%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU ksymoops | = 2.4.5 | No fix listed |
| GNU ksymoops | = 2.4.8 | No fix listed |
| GNU ksymoops | = 2.4.9 | No fix listed |
| mandrakesoft mandrake linux | = 9.1 | No fix listed |
| mandrakesoft mandrake linux | = 9.2 | No fix listed |
| mandrakesoft mandrake linux | = 10.0 | No fix listed |
| mandrakesoft mandrake linux corporate server | = 2.1 | No fix listed |
References
- MDKSA-2004:060 vendor-advisory
- 10516 patch vdb-entry vendor-advisory
- ksymoops-symlink(16392) vdb-entry