CVE-2004-0972

Fixed in a distro release EPSS <1%

The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

Published 2004-10-20 · CVE record · OSV

Products: lvm logical_volume_management_utilities, gentoo linux

Distro releases