CVE-2004-0851

LOW 2.1CVE-2004-0851 · Published 08/09/2004 · updated 16/06/2026

In short

CVE-2004-0851 is a LOW (CVSS 2.1) vulnerability affecting net-acct (ulrich callmeier).
Chance of exploitation in the next 30 days (EPSS): 0.35%, higher than 28.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
net-acct ulrich_callmeier	`= 0.6= 0.7= 0.71`	No fix yet

Description

The (1) write_list and (2) dump_curr_list functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

References

exorsus.net/projects/net-acct/net-acct-notempfiles.patch · Vendor Advisory
marc.info
secunia.com/advisories/12476 · Patch
debian.org/security/2004/dsa-559 · Patch
securityfocus.com/bid/11125 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/17283

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free