Remote Code Execution (RCE)

2020-04-1001:00:50

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

EPSS

Percentile

5.1%

JSON

The sysstat is vulnerable to Remote Code Execution (RCE). It was found that the sysstat initscript created a temporary file in an insecure way. A local attacker could use this flaw to create arbitrary files via a symbolic link attack.

References

osvdb.org/39709

secunia.com/advisories/26527

www.redhat.com/support/errata/RHSA-2011-1005.html

www.securityfocus.com/bid/25380

access.redhat.com/errata/RHSA-2011:1005

access.redhat.com/security/cve/CVE-2007-3852

access.redhat.com/security/updates/classification/#low

bugs.gentoo.org/show_bug.cgi?id=188808

bugzilla.redhat.com/show_bug.cgi?id=251200

exchange.xforce.ibmcloud.com/vulnerabilities/36045

EPSS

Percentile

5.1%

JSON

Related for VERACODE:24662