CVE-2004-0108

{"id": "CVE-2004-0108", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2004-04-15T04:00:00.000", "references": [{"url": "ftp://patches.sgi.com/support/free/security/advisories/20040302-01-U.asc", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2004/dsa-460", "source": "cve@mitre.org"}, {"url": "http://www.redhat.com/support/errata/RHSA-2004-053.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/9844", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15437", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107."}, {"lang": "es", "value": "El \u00fatil isag, que procesa datos de sysstat, permite a usuarios locales sobreescribir ficheros arbitrarios mediante un ataque de enlaces simb\u00f3licos en ficheros temporales, una vulnverabilidad distinta de CAN-2004-0107."}], "lastModified": "2017-10-10T01:30:17.580", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:redhat:sysstat:4.0.7-3:*:i386:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD0995DA-F1DF-433D-A97B-1D02570ED787"}, {"criteria": "cpe:2.3:a:sgi:propack:2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26430687-409B-448F-934B-06AB937DDF63"}, {"criteria": "cpe:2.3:a:sgi:propack:2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0702A32E-E577-403C-B4D9-15037D7100A5"}, {"criteria": "cpe:2.3:a:sysstat:sysstat:4.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "128E5519-B592-4A74-A0AE-70FF6C758E92"}, {"criteria": "cpe:2.3:a:sysstat:sysstat:4.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF8EA77A-0502-4CE1-8AF6-B9FCE3A3B61A"}, {"criteria": "cpe:2.3:a:sysstat:sysstat:4.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44DF02DE-E9E2-48FB-ADEB-86CD6BFD6AF1"}, {"criteria": "cpe:2.3:a:sysstat:sysstat:4.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F593D32F-D836-4CC6-B597-6847889CDB59"}, {"criteria": "cpe:2.3:a:sysstat:sysstat:4.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "816C2A5C-06BE-4DFB-8982-1A9FCE5FA6D7"}, {"criteria": "cpe:2.3:a:sysstat:sysstat:4.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A2198E1-5725-410B-B7E7-35749CA32A4B"}, {"criteria": "cpe:2.3:a:sysstat:sysstat:4.1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBE7138C-0258-4306-88EE-852CF9EF6605"}, {"criteria": "cpe:2.3:a:sysstat:sysstat:4.1.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "496B269B-8B6D-44DF-BCC1-CF48C85B3B18"}, {"criteria": "cpe:2.3:a:sysstat:sysstat:5.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DA6DACA-FC70-475F-8585-1799D5F74386"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}