Lucene search
OpenSSLOPENSSL:CVE-2004-0975HistorySep 30, 2004 - 12:00 a.m.
Vulnerability in OpenSSL CVE-2004-0975
2004-09-3000:00:00
www.openssl.org
17
The der_chop script created temporary files insecurely which could allow local users to overwrite files via a symlink attack on temporary files. Note that it is quite unlikely that a user would be using the redundant der_chop script, and this script was removed from the OpenSSL distribution.
- Fixed in OpenSSL 0.9.7f (git commit) (Affected since 0.9.7)
- Fixed in OpenSSL 0.9.6-cvs (Affected since 0.9.6)
Related
debian
debian
openvas
openvas
Debian: Security Advisory (DSA-603-1)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-24-1)
2022-08-26 00:00:00
OpenSSL: Insecure Temporary File Creation (CVE-2004-0975) - Windows
2021-08-13 00:00:00
cvelist
cvelist
CVE-2004-0975
2004-10-20 04:00:00
f5
f5
SOL15305 - OpenSSL vulnerability CVE-2004-0975
2014-06-02 00:00:00
K15305 : OpenSSL vulnerability CVE-2004-0975
2014-06-02 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : openssl (MDKSA-2004:147)
2004-12-07 00:00:00
OpenSSL < 0.9.7f Insecure Temporary File Creation
2012-01-04 00:00:00
Ubuntu 4.10 : openssl script vulnerability (USN-24-1)
2006-01-15 00:00:00
osv
osv
openssl - insecure temporary file
2004-12-01 00:00:00
debiancve
debiancve
CVE-2004-0975
2005-02-09 05:00:00
ubuntucve
ubuntucve
CVE-2004-0975
2005-02-09 00:00:00
ubuntu
ubuntu
openssl script vulnerability
2004-11-12 00:00:00
cve
cve
CVE-2004-0975
2005-02-09 05:00:00
centos
centos
openssl, openssl096b security update
2005-06-01 17:56:00
openssl, openssl095a, openssl096 security update
2005-06-01 23:22:48
gentoo
gentoo
OpenSSL, Groff: Insecure tempfile handling
2004-11-08 00:00:00
redhat
redhat
(RHSA-2005:476) openssl security update
2005-06-01 00:00:00
oraclelinux
oraclelinux
openssl-fips security update
2015-04-02 00:00:00
openssl security update
2019-03-13 00:00:00
openssl security update
2019-08-16 00:00:00