CVE-2004-2502

im-switch <11.4-46.1 - Local Privilege Escalation

Title source: llm

Description

im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file.

Exploits (1)

exploitdb WORKING POC VERIFIED

by SEKINE Tatsuo · bashlocallinux

https://www.exploit-db.com/exploits/24278

View Code ZIP pw:eip

References (6)

[Issue Tracking] http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126940

[Exploit, Vendor Advisory] http://packetstormsecurity.org/0407-advisories/fedora_im-switch_tempfile_race.txt

[Patch, Vendor Advisory] http://secunia.com/advisories/12037

[Exploit] http://www.osvdb.org/7772

[Exploit, Patch] http://www.securityfocus.com/bid/10717

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/16682

Scores

EPSS 0.0034

EPSS Percentile 56.9%

Details

Status published

Products (1)

im-switch/im-switch

Published Dec 31, 2004

Tracked Since Feb 18, 2026