Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 454
Alerts This Week
Warning Icon 1 454

Gentoo: GLSA-200404-04 Normal: Sysstat Code Execution Risk

gentoo
Calendar Grey April 7, 2004
Dist Gentoo Esm H88
Several weaknesses in sysstat may permit unauthorized code execution or file manipulation. Updating is recommended for enhanced security.
Multiple vulnerabilities in the way sysstat handles symlinks may allow an attacker to execute arbitrary code or overwrite arbitrary files

Summary

Gentoo Linux Security Advisory GLSA 200404-04 https://security.gentoo.org/ Severity: Normal Title: Multiple vulnerabilities in sysstat Date: April 06, 2004 Bugs: #45159 ID: 200404-04

Synopsis ======= Multiple vulnerabilities in the way sysstat handles symlinks may allow an attacker to execute arbitrary code or overwrite arbitrary files
Background ========= sysstat is a package containing a number of performance monitoring utilities for Linux, including sar, mpstat, iostat and sa tools
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- app-admin/sysstat < 5.0.2 >= 5.0.2
========== There are two vulnerabilities in the way sysstat handles symlinks:
1. The is...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory gentoo code execution file overwrite symlink sysstat normal

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Topics%20covered

Topics Covered

security advisory gentoo code execution file overwrite symlink sysstat normal

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround