6.1 Medium
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
8.8%
The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.
ftp://patches.sgi.com/support/free/security/advisories/20040302-01-U.asc
www.ciac.org/ciac/bulletins/o-097.shtml
www.osvdb.org/6884
www.redhat.com/support/errata/RHSA-2004-053.html
www.redhat.com/support/errata/RHSA-2004-093.html
www.securityfocus.com/bid/9838
exchange.xforce.ibmcloud.com/vulnerabilities/15428
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10737
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A849
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A862