Lucene search
Ubuntu.comUB:CVE-2004-0975HistoryFeb 09, 2005 - 12:00 a.m.
CVE-2004-0975
2005-02-0900:00:00
ubuntu.com
ubuntu.com
14
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
EPSS
0
Percentile
5.1%
The der_chop script in the openssl package in Trustix Secure Linux 1.5
through 2.1 and other operating systems allows local users to overwrite
files via a symlink attack on temporary files.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 6.06 | noarch | openssl | < 0.9.8a-7ubuntu0.3 | UNKNOWN |
| ubuntu | 6.10 | noarch | openssl | < 0.9.8b-2ubuntu2 | UNKNOWN |
| ubuntu | 7.04 | noarch | openssl | < 0.9.8b-2ubuntu2 | UNKNOWN |
| ubuntu | 6.06 | noarch | openssl097 | < 0.9.7g-5ubuntu1.1 | UNKNOWN |
| ubuntu | 6.10 | noarch | openssl097 | < 0.9.7k-3 | UNKNOWN |
| ubuntu | 7.04 | noarch | openssl097 | < 0.9.7k-3 | UNKNOWN |
Related
cvelist
cvelist
CVE-2004-0975
2004-10-20 04:00:00
debian
debian
openvas
openvas
Debian: Security Advisory (DSA-603-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 603-1 (openssl)
2008-01-17 00:00:00
OpenSSL: Insecure Temporary File Creation (CVE-2004-0975) - Linux
2021-08-13 00:00:00
nessus
nessus
Debian DSA-603-1 : openssl - insecure temporary file
2004-12-01 00:00:00
Ubuntu 4.10 : openssl script vulnerability (USN-24-1)
2006-01-15 00:00:00
OpenSSL 0.9.7 < 0.9.7f Vulnerability
2012-01-04 00:00:00
ubuntu
ubuntu
openssl script vulnerability
2004-11-12 00:00:00
nvd
nvd
CVE-2004-0975
2005-02-09 05:00:00
cve
cve
CVE-2004-0975
2005-02-09 05:00:00
debiancve
debiancve
CVE-2004-0975
2005-02-09 05:00:00
osv
osv
openssl - insecure temporary file
2004-12-01 00:00:00
f5
f5
K15305 : OpenSSL vulnerability CVE-2004-0975
2014-06-02 00:00:00
SOL15305 - OpenSSL vulnerability CVE-2004-0975
2014-06-02 00:00:00
openssl
openssl
Vulnerability in OpenSSL CVE-2004-0975
2004-09-30 00:00:00
centos
centos
openssl, openssl096b security update
2005-06-01 17:56:00
openssl, openssl095a, openssl096 security update
2005-06-01 23:22:48
gentoo
gentoo
OpenSSL, Groff: Insecure tempfile handling
2004-11-08 00:00:00
redhat
redhat
(RHSA-2005:476) openssl security update
2005-06-01 00:00:00
oraclelinux
oraclelinux
openssl-fips security update
2015-04-02 00:00:00
openssl security update
2019-03-13 00:00:00
openssl security update
2019-08-16 00:00:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
EPSS
0
Percentile
5.1%
Related for UB:CVE-2004-0975