Unscored severity · published Feb 9, 2005
CVE-2004-0966
The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems,…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GE
Gettext · Gnu
0.14.1 · source: NVD
UL
Ubuntu Linux · Ubuntu
4.1; 4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0966
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0966
bugzilla.redhat.com
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136323
marc.info
http://marc.info/?l=bugtraq&m=110382652226638&w=2
www.gentoo.org
http://www.gentoo.org/security/en/glsa/glsa-200410-10.xml
www.redhat.com
http://www.redhat.com/archives/fedora-legacy-announce/2006-January/msg00000.html
Patch
http://www.securityfocus.com/bid/11282
www.trustix.org
http://www.trustix.org/errata/2004/0050
More from Gettext
9.8
CVE-2018-18751
An issue was discovered in GNU gettext 0.19.8