CVE-2004-0107
Fixed in a distro release EPSS <1%
The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.
Products: redhat sysstat, sgi propack, sysstat
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sysstat | 5.0.2-1 |
| Debian 13 | sysstat | 5.0.2-1 |
| Debian 14 | sysstat | 5.0.2-1 |
| Red Hat Enterprise Linux 3 | sysstat | 0:4.0.7-4.EL3.2 |
| Red Hat Enterprise Linux 3 | sysstat-debuginfo | 0:4.0.7-4.EL3.2 |