CVE-2004-1387 The check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files.
LowCVSS 2.1
EPSS 0.55%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache HTTP Server | = 1.3.31 | No fix listed |
References
- [debian-apache] 20050119 Bug#290974: marked as done (apache: Temporary usage bugs that can be used in symlink attacks) mailing-list
- 13925 third-party-advisory
- apache-checkforensic-symlink(18993) vdb-entry
- USN-65-1 vendor-advisory