CVE-2004-0107

MEDIUM 4.6CVE-2004-0107 · Published 15/04/2004 · updated 16/06/2026

In short

CVE-2004-0107 is a MEDIUM (CVSS 4.6) vulnerability affecting sysstat (redhat), propack (sgi), sysstat (sysstat).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 33.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sysstat redhat	`= 4.0.7-3`	No fix yet
propack sgi	`= 2.3= 2.4`	No fix yet
sysstat sysstat	`= 4.0.7= 4.1.1= 4.1.2= 4.1.3= 4.1.4= 4.1.5= 4.1.6= 4.1.7= 5.0.1`	No fix yet

Description

The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.

References

patches.sgi.com/support/free/security/advisories/20040302-01-U.asc · Patch
ciac.org/ciac/bulletins/o-097.shtml
osvdb.org/6884
redhat.com/support/errata/RHSA-2004-053.html · Patch
redhat.com/support/errata/RHSA-2004-093.html
securityfocus.com/bid/9838 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/15428
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10737
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A849
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A862

More vulnerabilities in sysstat

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free