Vulnerability Database

296,733

Total vulnerabilities in the database

CVE-2004-0108

The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.

  • Published: Apr 15, 2004
  • Updated: Apr 13, 2023
  • CVE: CVE-2004-0108
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.6
  • AV:L/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
sysstat / sysstat 4.1.5 4.1.5.x
sysstat / sysstat 4.1.3 4.1.3.x
sysstat / sysstat 4.1.6 4.1.6.x
sysstat / sysstat 4.1.2 4.1.2.x
sysstat / sysstat 4.0.7 4.0.7.x
sysstat / sysstat 4.1.1 4.1.1.x
sysstat / sysstat 5.0.1 5.0.1.x
redhat / sysstat 4.0.7-3 4.0.7-3.x
sgi / propack 2.3 2.3.x
sysstat / sysstat 4.1.7 4.1.7.x
sgi / propack 2.4 2.4.x
sysstat / sysstat 4.1.4 4.1.4.x