Lucene search

K
ubuntuUbuntuUSN-4-1
HistoryOct 28, 2004 - 12:00 a.m.

Standard C library script vulnerabilities

2004-10-2800:00:00
ubuntu.com
37

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%

Releases

  • Ubuntu 4.10

Details

Recently, Trustix Secure Linux discovered some vulnerabilities in the
libc6 package. The utilities “catchsegv” and “glibcbug” created
temporary files in an insecure way, which allowed a symlink attack to
create or overwrite arbitrary files with the privileges of the user
invoking the program.

OSVersionArchitecturePackageVersionFilename
Ubuntu4.10noarchlibc6< *UNKNOWN

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%