Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 3 enterprise_linux:3::as | sysreport | 0:1.3.7.2-9 |
| Red Hat · RHEL 3 enterprise_linux:3::desktop | sysreport | 0:1.3.7.2-9 |
| Red Hat · RHEL 3 enterprise_linux:3::es | sysreport | 0:1.3.7.2-9 |
| Red Hat · RHEL 3 enterprise_linux:3::ws | sysreport | 0:1.3.7.2-9 |
Vulnerabilities 1
-
Unscored —
sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.
References
-
article
https://access.redhat.com/security/updates/classification/#low
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=162978
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_598.json
-
report
https://access.redhat.com/security/cve/CVE-2005-2104
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1617690
-
advisory
https://www.cve.org/CVERecord?id=CVE-2005-2104
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2005-2104