CVE-2005-2104 sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.
LowCVSS 2.1
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat sysreport | All versions | No fix listed |
References
- 16381 patch third-party-advisory
- 17539 third-party-advisory
- 1014653 patch vdb-entry vendor-advisory
- 18682 vdb-entry
- FEDORA-2005-1071 vendor-advisory
- FEDORA-2005-1072 vendor-advisory
- RHSA-2005:598 patch vendor-advisory
- 15379 vdb-entry
- bugzilla.redhat.com vendor-advisory
- sysreport-race-condition(21770) vdb-entry
- oval:org.mitre.oval:def:9411 signature vdb-entry