CVE-2004-0972

Name of the Vulnerable Software and Affected Versions lvm package versions 1.5 through 2.1

Description The issue allows local users to overwrite files via a symlink attack on temporary files, potentially leading to disruption of protected information integrity. This can be exploited by a local attacker.

Recommendations For lvm package versions 1.5 through 2.1, consider restricting access to the lvmcreate initrd script as a temporary workaround until a patch is available.