CVE-2004-0851 The (1) write_list and (2) dump_curr_list functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
LowCVSS 2.1
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) write_list and (2) dump_curr_list functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ulrich callmeier net-acct | = 0.6 | No fix listed |
| ulrich callmeier net-acct | = 0.7 | No fix listed |
| ulrich callmeier net-acct | = 0.71 | No fix listed |
| debian/net-acct(Debian:12) | < 0.71-7 | 0.71-7 |
| debian/net-acct(Debian:13) | < 0.71-7 | 0.71-7 |
References
- exorsus.net vendor-advisory
- 20040908 Insecure Temporary File Creation Vulnerability in Net-Acct mailing-list
- 12476 patch third-party-advisory vendor-advisory
- DSA-559 patch vendor-advisory
- 11125 patch vdb-entry vendor-advisory
- net-acct-tmp-symlink(17283) vdb-entry
- Debian Security Tracker CVE-2004-0851 vendor-advisory