CVE-2004-0975

Publication date 9 February 2005

Last updated 24 July 2024

Ubuntu priority

The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
openssl	7.04 feisty	Fixed 0.9.8b-2ubuntu2
	6.10 edgy	Fixed 0.9.8b-2ubuntu2
	6.06 LTS dapper	Fixed 0.9.8a-7ubuntu0.3
openssl097	7.04 feisty	Fixed 0.9.7k-3
	6.10 edgy	Fixed 0.9.7k-3
	6.06 LTS dapper	Fixed 0.9.7g-5ubuntu1.1

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-24-1
openssl script vulnerability
12 November 2004

Other references

https://www.cve.org/CVERecord?id=CVE-2004-0975