Lucene search

K
ubuntuUbuntuUSN-24-1
HistoryNov 12, 2004 - 12:00 a.m.

openssl script vulnerability

2004-11-1200:00:00
ubuntu.com
25

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

Releases

  • Ubuntu 4.10

Details

Recently, Trustix Secure Linux discovered a vulnerability in the
openssl package. The auxiliary script “der_chop” created temporary
files in an insecure way, which could allow a symlink attack to create
or overwrite arbitrary files with the privileges of the user invoking
the program.

OSVersionArchitecturePackageVersionFilename
Ubuntu4.10noarchopenssl< *UNKNOWN

5.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%