Lucene search

MitreCVE-2004-0975

HistoryFeb 09, 2005 - 5:00 a.m.

CVE-2004-0975

2005-02-0905:00:00

mitre

web.nvd.nist.gov

cve-2004-0975

der_chop script

openssl

trustix secure linux

symlink attack

nvd

file overwrite

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

Percentile

5.1%

JSON

The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.

Affected configurations

Nvd

Node

mandrakesoftmandrake_multi_network_firewallMatch8.2

opensslopensslMatch0.9.6

opensslopensslMatch0.9.6a

opensslopensslMatch0.9.6b

opensslopensslMatch0.9.6c

opensslopensslMatch0.9.6d

opensslopensslMatch0.9.6e

opensslopensslMatch0.9.6f

opensslopensslMatch0.9.6g

opensslopensslMatch0.9.6h

opensslopensslMatch0.9.6i

opensslopensslMatch0.9.6j

opensslopensslMatch0.9.6k

opensslopensslMatch0.9.6l

opensslopensslMatch0.9.6m

opensslopensslMatch0.9.7c

opensslopensslMatch0.9.7d

Node

gentoolinux

mandrakesoftmandrake_linuxMatch9.2

mandrakesoftmandrake_linuxMatch9.2amd64

mandrakesoftmandrake_linuxMatch10.0

mandrakesoftmandrake_linuxMatch10.0amd64

mandrakesoftmandrake_linuxMatch10.1

mandrakesoftmandrake_linuxMatch10.1x86_64

mandrakesoftmandrake_linux_corporate_serverMatch2.1

mandrakesoftmandrake_linux_corporate_serverMatch2.1x86_64

VendorProductVersionCPE
opensslopenssl0.9.7ccpe:/a:openssl:openssl:0.9.7c:::
opensslopenssl0.9.6dcpe:/a:openssl:openssl:0.9.6d:::
opensslopenssl0.9.6gcpe:/a:openssl:openssl:0.9.6g:::
opensslopenssl0.9.6ccpe:/a:openssl:openssl:0.9.6c:::
opensslopenssl0.9.6mcpe:/a:openssl:openssl:0.9.6m:::
opensslopenssl0.9.6bcpe:/a:openssl:openssl:0.9.6b:::
opensslopenssl0.9.7dcpe:/a:openssl:openssl:0.9.7d:::
opensslopenssl0.9.6hcpe:/a:openssl:openssl:0.9.6h:::
opensslopenssl0.9.6kcpe:/a:openssl:openssl:0.9.6k:::
opensslopenssl0.9.6ecpe:/a:openssl:openssl:0.9.6e:::

Vendor	Product	Version	CPE
openssl	openssl	0.9.7c	cpe:/a:openssl:openssl:0.9.7c:::
openssl	openssl	0.9.6d	cpe:/a:openssl:openssl:0.9.6d:::
openssl	openssl	0.9.6g	cpe:/a:openssl:openssl:0.9.6g:::
openssl	openssl	0.9.6c	cpe:/a:openssl:openssl:0.9.6c:::
openssl	openssl	0.9.6m	cpe:/a:openssl:openssl:0.9.6m:::
openssl	openssl	0.9.6b	cpe:/a:openssl:openssl:0.9.6b:::
openssl	openssl	0.9.7d	cpe:/a:openssl:openssl:0.9.7d:::
openssl	openssl	0.9.6h	cpe:/a:openssl:openssl:0.9.6h:::
openssl	openssl	0.9.6k	cpe:/a:openssl:openssl:0.9.6k:::
openssl	openssl	0.9.6e	cpe:/a:openssl:openssl:0.9.6e:::