PT-2004-1269 · Linux · Antivir

L0Om · Published 2004-01-15 · Updated 2017-07-11 · CVE-2004-0058

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Antivir / Linux versions 2.0.9-9 and earlier

Description The issue allows local users to overwrite arbitrary files via a symlink attack on the .pid antivir $$ temporary file.

Recommendations For versions 2.0.9-9 and earlier, consider restricting access to the temporary file .pid antivir $$ to prevent symlink attacks until a patch is available.

Fix

Related Identifiers

CVE-2004-0058

Affected Products

Antivir

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2004-0058 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14214 · Note
• http://secunia.com/advisories/10620 · Note
• http://securitytracker.com/id?1008702 · Note
• http://osvdb.org/3496 · Note
• http://marc.info/?l=bugtraq&m=107402026023763&w=2 · Note