CVE-2004-0968
Fixed in a distro release EPSS <1%
The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.
Products: gnu glibc, redhat enterprise_linux, redhat enterprise_linux_desktop
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | glibc | 2.3.2.ds1-19 |
| Debian 13 | glibc | 2.3.2.ds1-19 |
| Debian 14 | glibc | 2.3.2.ds1-19 |
| Debian 3.0 | glibc | 2.2.5-11.8 |
| Red Hat Enterprise Linux 3 | glibc | 0:2.3.2-95.30 |
| Red Hat Enterprise Linux 3 | glibc-common | 0:2.3.2-95.30 |
| Red Hat Enterprise Linux 3 | glibc-debuginfo | 0:2.3.2-95.30 |
| Red Hat Enterprise Linux 3 | glibc-debuginfo-common | 0:2.3.2-95.30 |
| Red Hat Enterprise Linux 3 | glibc-devel | 0:2.3.2-95.30 |
| Red Hat Enterprise Linux 3 | glibc-headers | 0:2.3.2-95.30 |
| Red Hat Enterprise Linux 3 | glibc-profile | 0:2.3.2-95.30 |
| Red Hat Enterprise Linux 3 | glibc-utils | 0:2.3.2-95.30 |
| Red Hat Enterprise Linux 3 | nptl-devel | 0:2.3.2-95.30 |
| Red Hat Enterprise Linux 3 | nscd | 0:2.3.2-95.30 |