NetSight
low2.1

CVE-2004-0974

The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack …

Impact

The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

Affected products

VendorProductAffected versions
NetatalkOpen Source Apple File Share Protocol Suite
Versions 1.5_pre6, 1.6.1, 1.6.4
MandrakesoftMandrake Linux
Versions 9.2, 10.0, 10.1
MandrakesoftMandrake Linux Corporate Server
Version 2.1
RedhatFedora Core
Versions core_2.0, core_3.0

References