PT-2004-3664 · Debian · Logcheck

Publicado 1970-01-01 · Atualizado 2017-07-11 · CVE-2004-0404

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions logcheck versions prior to 1.1.1

Description The issue concerns multiple vulnerabilities in the logcheck package of the Debian GNU/Linux operating system. These vulnerabilities can be exploited to compromise the integrity of protected information. Specifically, it is mentioned that logcheck before version 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.

Recommendations For logcheck versions prior to 1.1.1, update to version 1.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the temporary directory in /var/tmp to minimize the risk of exploitation.

Correção

Identificadores relacionados

BDU:2015-01365

BDU:2015-01366

BDU:2015-01367

CVE-2004-0404

DSA-488

Produtos afetados

Logcheck

Referências · 14

• https://security-tracker.debian.org/tracker/CVE-2004-0404 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0404 · Nota de Segurança
• http://debian.org/security/2004/dsa-488 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0404 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-01366 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15888 · Nota
• https://osv.dev/vulnerability/CVE-2004-0404 · Aviso do Fabricante
• http://securityfocus.com/bid/10162 · Correção
• http://debian.org/security/dsa-488 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0404 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-01367 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDKSA-2004:155 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-01365 · Nota de Segurança
• http://secunia.com/advisories/11399 · Aviso do Fabricante