Lucene search

K
ubuntuUbuntuUSN-5-1
HistoryOct 27, 2004 - 12:00 a.m.

gettext vulnerabilities

2004-10-2700:00:00
ubuntu.com
36

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%

Releases

  • Ubuntu 4.10

Details

Recently, Trustix Secure Linux discovered some vulnerabilities in the
gettext package. The programs “autopoint” and “gettextize” created
temporary files in an insecure way, which allowed a symlink attack to
create or overwrite arbitrary files with the privileges of the user
invoking the program.

OSVersionArchitecturePackageVersionFilename
Ubuntu4.10noarchgettext< *UNKNOWN

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%