CVE-2004-2097 — Linux vulnerability

4 documents4 sources
Severity
2.1LOWNVD
EPSS
0.1%
top 75.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Suse Linux
Timeline
PublishedDec 31
Latest updateApr 29

Description

Multiple scripts on SuSE Linux 9.0 allow local users to overwrite arbitrary files via a symlink attack on (1) /tmp/fvwm-bug created by fvwm-bug, (2) /tmp/wmmenu created by wm-oldmenu2new, (3) /tmp/rates created by x11perfcomp, (4) /tmp/xf86debug.1.log created by xf86debug, (5) /tmp/.winpopup-new created by winpopup-send.sh, or (6) /tmp/initrd created by lvmcreate_initrd.

CVSS vector

AV:L/AC:L/C:N/I:P/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-xwhc-7pg9-qf8h: Multiple scripts on SuSE Linux 9↗2022-04-29
▶
CVEList
CVE-2004-2097: Multiple scripts on SuSE Linux 9↗2005-05-27
▶

📋Vendor Advisories

1
Debian
CVE-2004-2097: fvwm - Multiple scripts on SuSE Linux 9.0 allow local users to overwrite arbitrary file...↗2004
▶
CVE-2004-2097 — Suse Linux vulnerability | cvebase