PT-2004-3664 · Debian · Logcheck

Published 1970-01-01 · Updated 2017-07-11 · CVE-2004-0404

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Low

Base vector

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions logcheck versions prior to 1.1.1

Description The issue concerns multiple vulnerabilities in the logcheck package of the Debian GNU/Linux operating system. These vulnerabilities can be exploited to compromise the integrity of protected information. Specifically, it is mentioned that logcheck before version 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.

Recommendations For logcheck versions prior to 1.1.1, update to version 1.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the temporary directory in /var/tmp to minimize the risk of exploitation.

Fix

Related Identifiers

BDU:2015-01365

BDU:2015-01366

BDU:2015-01367

CVE-2004-0404

DSA-488

Affected Products

Logcheck

References · 14

• https://security-tracker.debian.org/tracker/CVE-2004-0404 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0404 · Security Note
• http://debian.org/security/2004/dsa-488 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0404 · Security Note
• https://bdu.fstec.ru/vul/2015-01366 · Security Note
• https://osv.dev/vulnerability/CVE-2004-0404 · Vendor Advisory
• http://securityfocus.com/bid/10162 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0404 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01367 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2004:155 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01365 · Security Note
• http://secunia.com/advisories/11399 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15888 · Note
• http://debian.org/security/dsa-488 · Note