CVE-2004-0972

2005-02-0905:00:00

[email protected]

web.nvd.nist.gov

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

Affected configurations

Nvd

Node

lvmlogical_volume_management_utilitiesMatch1.0.1

lvmlogical_volume_management_utilitiesMatch1.0.4

lvmlogical_volume_management_utilitiesMatch1.0.7

lvmlogical_volume_management_utilitiesMatch1.0.8

Node

gentoolinux

VendorProductVersionCPE
lvmlogical_volume_management_utilities1.0.1cpe:2.3:a:lvm:logical_volume_management_utilities:1.0.1:*:*:*:*:*:*:*
lvmlogical_volume_management_utilities1.0.4cpe:2.3:a:lvm:logical_volume_management_utilities:1.0.4:*:*:*:*:*:*:*
lvmlogical_volume_management_utilities1.0.7cpe:2.3:a:lvm:logical_volume_management_utilities:1.0.7:*:*:*:*:*:*:*
lvmlogical_volume_management_utilities1.0.8cpe:2.3:a:lvm:logical_volume_management_utilities:1.0.8:*:*:*:*:*:*:*
gentoolinux*cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lvm	logical_volume_management_utilities	1.0.1	cpe:2.3:a:lvm:logical_volume_management_utilities:1.0.1:::::::*
lvm	logical_volume_management_utilities	1.0.4	cpe:2.3:a:lvm:logical_volume_management_utilities:1.0.4:::::::*
lvm	logical_volume_management_utilities	1.0.7	cpe:2.3:a:lvm:logical_volume_management_utilities:1.0.7:::::::*
lvm	logical_volume_management_utilities	1.0.8	cpe:2.3:a:lvm:logical_volume_management_utilities:1.0.8:::::::*
gentoo	linux	*	cpe:2.3:o:gentoo:linux::::::::