CVE-2004-2569

LOW 2.1CVE-2004-2569 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-2569 is a LOW (CVSS 2.1) vulnerability affecting ipmenu (david stes).
Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 41.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ipmenu david_stes	`= 0.0.3= 0.0.3-2= 0.0.3-3= 0.0.3-4`	No fix yet

Description

ipmenu 0.0.3 before Debian GNU/Linux ipmenu_0.0.3-5 allows local users to overwrite arbitrary files via a symlink attack on the ipmenu.log temporary file.

References

bugs.debian.org/cgi-bin/bugreport.cgi
secunia.com/advisories/11526 · Vendor Advisory
secunia.com/advisories/17682 · Patch
securitytracker.com/id · Exploit
debian.org/security/2005/dsa-907 · Patch
osvdb.org/5788
securityfocus.com/bid/10269
exchange.xforce.ibmcloud.com/vulnerabilities/16052

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free