Unscored severity · published Nov 23, 2004
CVE-2004-0267
The (1) inoregupdate, (2) uniftest, or (3) unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to overwrite arbitrary files via a symlink attack on files in /tmp
–
CVSS
0.5%
EPSS
No
On KEV
Description
The (1) inoregupdate, (2) uniftest, or (3) unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to overwrite arbitrary files via a symlink attack on files in /tmp.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Inoculateit · Broadcom
6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0267
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0267
marc.info
http://marc.info/?l=bugtraq&m=107635584431518&w=2
secunia.com
http://secunia.com/advisories/10833
URL Repurposed
http://www.excluded.org/advisories/advisory10.txt
www.osvdb.org
http://www.osvdb.org/4735
www.osvdb.org
http://www.osvdb.org/4855
www.osvdb.org
http://www.osvdb.org/4856
More from Inoculateit
–
CVE-2005-1693
Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1,…
–
CVE-2004-0937
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with…
–
CVE-2004-0932
McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via…
–
CVE-2004-0933
Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion…
–
CVE-2004-0934
Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the…