CVE-2004-0975
Fixed in a distro release EPSS <1%
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
Products: mandrakesoft mandrake_multi_network_firewall, openssl, gentoo linux, mandrakesoft mandrake_linux, mandrakesoft mandrake_linux_corporate_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openssl | 0.9.7e-3 |
| Debian 13 | openssl | 0.9.7e-3 |
| Debian 14 | openssl | 0.9.7e-3 |
| Debian 3.0 | openssl | 0.9.6c-2.woody.7 |
| Red Hat Enterprise Linux 3 | openssl | 0:0.9.7a-33.15 |
| Red Hat Enterprise Linux 3 | openssl-debuginfo | 0:0.9.7a-33.15 |
| Red Hat Enterprise Linux 3 | openssl-devel | 0:0.9.7a-33.15 |
| Red Hat Enterprise Linux 3 | openssl-perl | 0:0.9.7a-33.15 |
| Red Hat Enterprise Linux 3 | openssl096b | 0:0.9.6b-16.22.3 |
| Red Hat Enterprise Linux 3 | openssl096b-debuginfo | 0:0.9.6b-16.22.3 |
| Red Hat Enterprise Linux 4 | openssl | 0:0.9.7a-43.2 |
| Red Hat Enterprise Linux 4 | openssl-debuginfo | 0:0.9.7a-43.2 |
| Red Hat Enterprise Linux 4 | openssl-devel | 0:0.9.7a-43.2 |
| Red Hat Enterprise Linux 4 | openssl-perl | 0:0.9.7a-43.2 |
| Red Hat Enterprise Linux 4 | openssl096b | 0:0.9.6b-22.3 |
| Red Hat Enterprise Linux 4 | openssl096b-debuginfo | 0:0.9.6b-22.3 |