Published: 09/02/2005 Updated: 11/10/2017

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

The catchsegv script in glibc 2.3.2 and previous versions allows local users to overwrite files via a symlink attack on temporary files.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu glibc 2.0.5
gnu glibc 2.0.6
gnu glibc 2.1.9
gnu glibc 2.2
gnu glibc 2.3.1
gnu glibc 2.3.10
gnu glibc 2.1
gnu glibc 2.1.1
gnu glibc 2.2.1
gnu glibc 2.2.2
gnu glibc 2.3.2
gnu glibc 2.3.3
gnu glibc 2.0
gnu glibc 2.0.1
gnu glibc 2.0.2
gnu glibc 2.1.1.6
gnu glibc 2.1.2
gnu glibc 2.2.3
gnu glibc 2.2.4
gnu glibc 2.3.4
gnu glibc 2.0.3
gnu glibc 2.0.4
gnu glibc 2.1.3
gnu glibc 2.1.3.10
gnu glibc 2.2.5
gnu glibc 2.3
redhat enterprise linux desktop 3.0
redhat enterprise linux 3.0

Synopsis glibc security update Type/Severity Security Advisory: Low Topic Updated glibc packages that address several bugs and implement someenhancements are now available Description The GNU libc packages (known as glibc) contain the standard C librariesused by applicationsThis errata fi ...

Synopsis glibc security update Type/Severity Security Advisory: Low Topic Updated glibc packages that address several bugs are now availableThis update has been rated as having low security impact by the Red HatSecurity Response Team Description The GNU libc packages (known as glibc) cont ...

NVD-CWE-Other http://www.securityfocus.com/bid/11286 http://www.trustix.org/errata/2004/0050 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136318 http://www.debian.org/security/2005/dsa-636 http://security.gentoo.org/glsa/glsa-200410-19.xml http://www.redhat.com/support/errata/RHSA-2004-586.html http://www.redhat.com/support/errata/RHSA-2005-261.html https://www.ubuntu.com/usn/usn-4-1/https://exchange.xforce.ibmcloud.com/vulnerabilities/17583 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9523 https://access.redhat.com/errata/RHSA-2004:586 https://nvd.nist.gov

CVE-2004-0968

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect