CVE

Id
9394  
CVE No.
CVE-2004-0966  
Status
Candidate  
Description
The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files.  
Phase
Assigned (20041019)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
62702 9394 CVE-2004-0966 FEDORA:FLSA:136323  View
62703 9394 CVE-2004-0966 URL:http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00000.html  View
62704 9394 CVE-2004-0966 GENTOO:GLSA-200410-10  View
62705 9394 CVE-2004-0966 URL:http://www.gentoo.org/security/en/glsa/glsa-200410-10.xml  View
62706 9394 CVE-2004-0966 MANDRIVA:MDKSA-2006:051  View
62707 9394 CVE-2004-0966 URL:http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:051  View
62708 9394 CVE-2004-0966 TRUSTIX:2004-0050  View
62709 9394 CVE-2004-0966 URL:http://www.trustix.org/errata/2004/0050  View
62710 9394 CVE-2004-0966 CONFIRM:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136323  View
62711 9394 CVE-2004-0966 UBUNTU:USN-5-1  View
62712 9394 CVE-2004-0966 URL:https://www.ubuntu.com/usn/usn-5-1/  View
62713 9394 CVE-2004-0966 OPENPKG:OpenPKG-SA-2004.055  View
62714 9394 CVE-2004-0966 URL:http://marc.info/?l=bugtraq&m=110382652226638&w=2  View
62715 9394 CVE-2004-0966 BID:11282  View
62716 9394 CVE-2004-0966 URL:http://www.securityfocus.com/bid/11282  View
62717 9394 CVE-2004-0966 XF:script-temporary-file-overwrite(17583)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63028 JVNDB-2004-000370 ESP Ghostscript の複数のスクリプトにおけるシンボリックリンク攻撃を受ける脆弱性 ESP Ghostscript (espgs) には (1) pj-gs.sh (2) ps2epsi (3) pv.sh (4) sysvlp.sh のいずれかのスクリプトを使用した場合に、セキュリティ上不適切な方法で一時ファイルを作成してしまう不備が存在するため、シンボリックリンク攻撃を受ける脆弱性が存在します。 CVE-2004-0967 9394 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000370.html  View