Home > Vulnerability Database > CVE-2004-1000

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2004-1000

Date: January 19, 2005

lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack.

Severity Score

4.0

Related Resources (6)

Url: https://nvd.nist.gov/vuln/detail/CVE-2004-1000

Url: http://www.debian.org/security/2004/dsa-630

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/18808

Url: http://secunia.com/advisories/13771

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2004-1000

Url: https://www.mend.io/vulnerability-database/CVE-2004-1000

Severity Score

4.0

CVSS v3.1

Base Score:	4.0
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	LOW

CVSS v2

Base Score:	2.1
Access Vector (AV):	LOCAL
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	PARTIAL
Additional information:

Do you need more information?

Contact Us