CVE-2004-1901

MEDIUM 5.5CVE-2004-1901 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-1901 is a MEDIUM (CVSS 5.5) vulnerability affecting portage (gentoo).
Chance of exploitation in the next 30 days (EPSS): 0.37%, higher than 30.4% of all vulnerabilities.
Fix: update to 2.0.50 or later.

Package	Affected versions	Patched versions
portage gentoo	`= 2.0.50< 2.0.50`	`2.0.50`

Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

= 2.0.50< 2.0.50

2.0.50

More vulnerabilities in portage

See all →