CVE

Id
9398  
CVE No.
CVE-2004-0970  
Status
Candidate  
Description
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.  
Phase
Assigned (20041019)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
62772 9398 CVE-2004-0970 VULNWATCH:20050916 ncompress insecure temporary file creation  View
62773 9398 CVE-2004-0970 MISC:http://www.zataz.net/adviso/ncompress-09052005.txt  View
62774 9398 CVE-2004-0970 DEBIAN:DSA-588  View
62775 9398 CVE-2004-0970 URL:http://www.debian.org/security/2004/dsa-588  View
62776 9398 CVE-2004-0970 TRUSTIX:2004-0050  View
62777 9398 CVE-2004-0970 URL:http://www.trustix.org/errata/2004/0050  View
62778 9398 CVE-2004-0970 BID:11288  View
62779 9398 CVE-2004-0970 URL:http://www.securityfocus.com/bid/11288  View
62780 9398 CVE-2004-0970 SECUNIA:13131  View
62781 9398 CVE-2004-0970 URL:http://secunia.com/advisories/13131  View
62782 9398 CVE-2004-0970 XF:script-temporary-file-overwrite(17583)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63030 JVNDB-2004-000372 MIT Kerberos の send-pr.sh におけるシンボリックリンク攻撃を受ける脆弱性 MIT Kerberos に含まれる send-pr.sh には、セキュリティ上不適切な方法で一時ファイルを作成してしまう不備が存在するため、シンボリックリンク攻撃を受ける脆弱性が存在します。 CVE-2004-0971 9398 2.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000372.html  View