PT-2004-1026
CVE-2004-0972
·
تاريخ النشر
2004-10-20
·
تاريخ التحديث
2017-10-11
الوصف من
CVSS 2.0
2.1
منخفضةالمقاييسAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
lvm package versions 1.5 through 2.1
Description
The issue allows local users to overwrite files via a symlink attack on temporary files, potentially leading to disruption of protected information integrity. This can be exploited by a local attacker.
Recommendations
For lvm package versions 1.5 through 2.1, consider restricting access to the lvmcreate initrd script as a temporary workaround until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾