CVE-2004-0108
Fixed in a distro release EPSS <1%
The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.
Products: redhat sysstat, sgi propack, sysstat
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sysstat | 5.0.2-1 |
| Debian 13 | sysstat | 5.0.2-1 |
| Debian 14 | sysstat | 5.0.2-1 |
| Debian 3.0 | sysstat | 5.0.1-1 |
| Red Hat Enterprise Linux 3 | sysstat | 0:4.0.7-4.EL3.2 |
| Red Hat Enterprise Linux 3 | sysstat-debuginfo | 0:4.0.7-4.EL3.2 |