PT-2004-1269 · Linux · Antivir

L0Om · Publicado 2004-01-15 · Atualizado 2017-07-11 · CVE-2004-0058

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Antivir / Linux versions 2.0.9-9 and earlier

Description The issue allows local users to overwrite arbitrary files via a symlink attack on the .pid antivir $$ temporary file.

Recommendations For versions 2.0.9-9 and earlier, consider restricting access to the temporary file .pid antivir $$ to prevent symlink attacks until a patch is available.

Correção

Identificadores relacionados

CVE-2004-0058

Produtos afetados

Antivir

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/14214 · Nota
• http://secunia.com/advisories/10620 · Nota
• http://securitytracker.com/id?1008702 · Nota
• http://osvdb.org/3496 · Nota
• http://marc.info/?l=bugtraq&m=107402026023763&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0058 · Nota de Segurança