Revision Date: | 2007-04-25 | Version: | 19 |
Title: | Red Hat Enterprise 3 sysstat port and trigger Scripts symlink Attack Vulnerability |
Description: | The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108. |
Family: | unix | Class: | vulnerability |
Status: | ACCEPTED | Reference(s): | CVE-2004-0107
|
Platform(s): | Red Hat Enterprise Linux 3
| Product(s): | Sysstat
|
Definition Synopsis |
Red Hat Enterprise 3 is installed AND ix86 architecture
AND sysstat version is less than 4.0.7-4.EL3.2
|