CVE-2004-0107

sysstat <4.0.7 - Local Privilege Escalation

Title source: llm
STIX 2.1

Description

The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.

References (10)

Core 10
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2004-093.html
Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac
http://www.ciac.org/ciac/bulletins/o-097.shtml
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10737
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/15428
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/9838
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A862
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A849
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2004-053.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/6884

Scores

EPSS 0.0007
EPSS Percentile 22.0%

Details

Status published
Products (12)
redhat/sysstat 4.0.7-3
sgi/propack 2.3
sgi/propack 2.4
sysstat/sysstat 4.0.7
sysstat/sysstat 4.1.1
sysstat/sysstat 4.1.2
sysstat/sysstat 4.1.3
sysstat/sysstat 4.1.4
sysstat/sysstat 4.1.5
sysstat/sysstat 4.1.6
... and 2 more
Published Apr 15, 2004
Tracked Since Feb 18, 2026