Lucene search
GoogleOSV:DSA-603-1HistoryDec 01, 2004 - 12:00 a.m.
openssl - insecure temporary file
2004-12-0100:00:00
Google
osv.dev
10
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
Trustix developers discovered insecure temporary file creation in a
supplemental script (der_chop) of the openssl package which may allow
local users to overwrite files via a symlink attack.
For the stable distribution (woody) this problem has been fixed in
version 0.9.6c-2.woody.7.
For the unstable distribution (sid) this problem has been fixed in
version 0.9.7e-1.
We recommend that you upgrade your openssl package.
References
Related
debian
debian
openvas
openvas
Debian: Security Advisory (DSA-603-1)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-24-1)
2022-08-26 00:00:00
OpenSSL: Insecure Temporary File Creation (CVE-2004-0975) - Windows
2021-08-13 00:00:00
cvelist
cvelist
CVE-2004-0975
2004-10-20 04:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2004-0975
2004-09-30 00:00:00
f5
f5
SOL15305 - OpenSSL vulnerability CVE-2004-0975
2014-06-02 00:00:00
K15305 : OpenSSL vulnerability CVE-2004-0975
2014-06-02 00:00:00
nessus
nessus
Mandrake Linux Security Advisory : openssl (MDKSA-2004:147)
2004-12-07 00:00:00
Ubuntu 4.10 : openssl script vulnerability (USN-24-1)
2006-01-15 00:00:00
Debian DSA-603-1 : openssl - insecure temporary file
2004-12-01 00:00:00
debiancve
debiancve
CVE-2004-0975
2005-02-09 05:00:00
cve
cve
CVE-2004-0975
2005-02-09 05:00:00
ubuntu
ubuntu
openssl script vulnerability
2004-11-12 00:00:00
ubuntucve
ubuntucve
CVE-2004-0975
2005-02-09 00:00:00
centos
centos
openssl, openssl096b security update
2005-06-01 17:56:00
openssl, openssl095a, openssl096 security update
2005-06-01 23:22:48
gentoo
gentoo
OpenSSL, Groff: Insecure tempfile handling
2004-11-08 00:00:00
redhat
redhat
(RHSA-2005:476) openssl security update
2005-06-01 00:00:00
oraclelinux
oraclelinux
openssl-fips security update
2015-04-02 00:00:00
openssl security update
2019-03-13 00:00:00
openssl security update
2019-08-16 00:00:00
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
Related for OSV:DSA-603-1