Vulnerabilities > CVE-2004-0058 - Local Security vulnerability in AntiVir

CVSS 2.1 - LOW

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

local

low complexity

linux

NVD

Published: 2004-02-17

Updated: 2017-07-11

Summary

Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the .pid_antivir_$$ temporary file.

Vulnerable Configurations

Part	Description	Count
OS	Linux Linux Linux Kernel - Linux Linux Kernel 1.2.0 Linux Linux Kernel 1.3.0 Linux Linux Kernel 2.0.0 Linux Linux Kernel 2.0.1 Linux Linux Kernel 2.0.2 Linux Linux Kernel 2.0.3 Linux Linux Kernel 2.0.4 Linux Linux Kernel 2.0.5 Linux Linux Kernel 2.0.6 Linux Linux Kernel 2.0.7 Linux Linux Kernel 2.0.8 Linux Linux Kernel 2.0.9	13

References

http://marc.info/?l=bugtraq&m=107402026023763&w=2
http://secunia.com/advisories/10620
http://www.osvdb.org/3496
http://www.securitytracker.com/id?1008702
https://exchange.xforce.ibmcloud.com/vulnerabilities/14214