Vulnerability Details CVE-2004-0108
The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.9%
CVSS Severity
CVSS v2 Score 4.6
References
- ftp://patches.sgi.com/support/free/security/advisories/20040302-01-U.asc
- http://www.debian.org/security/2004/dsa-460
- http://www.redhat.com/support/errata/RHSA-2004-053.html
- http://www.securityfocus.com/bid/9844
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15437
- ftp://patches.sgi.com/support/free/security/advisories/20040302-01-U.asc
- http://www.debian.org/security/2004/dsa-460
- http://www.redhat.com/support/errata/RHSA-2004-053.html
- http://www.securityfocus.com/bid/9844
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15437
Products affected by CVE-2004-0108
-
cpe:2.3:a:redhat:sysstat:4.0.7-3
-
cpe:2.3:a:sgi:propack:2.3
-
cpe:2.3:a:sgi:propack:2.4
-
cpe:2.3:a:sysstat:sysstat:4.0.7
-
cpe:2.3:a:sysstat:sysstat:4.1.1
-
cpe:2.3:a:sysstat:sysstat:4.1.2
-
cpe:2.3:a:sysstat:sysstat:4.1.3
-
cpe:2.3:a:sysstat:sysstat:4.1.4
-
cpe:2.3:a:sysstat:sysstat:4.1.5
-
cpe:2.3:a:sysstat:sysstat:4.1.6
-
cpe:2.3:a:sysstat:sysstat:4.1.7
-
cpe:2.3:a:sysstat:sysstat:5.0.1