NetSight
medium5.5

CVE-2004-1901

Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles.

Impact

Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles.

Affected products

VendorProductAffected versions
GentooPortage
before 2.0.50
Version 2.0.50
GentooLinux
Version 1.4

Weakness classification

References