CVE:CVE-2004-0581
CNNVD:CNNVD-200408-119
Mandrake Linux 9.1到10.0版本以及Corporate Server 2.1版本中的ksymoops-gznm脚本存在漏洞。本地用户可以通过在/ tmp目录文件上的链接攻击删除任意文件。
solution:Upgrade gnu ksymoops to a higher version than 2.4.5,2.4.8,2.4.9,and avoid the version 2.4.5,2.4.8,2.4.9; Upgrade mandrakesoft mandrake_linux to a higher version than 9.1,9.2,10.0,and avoid the version 9.1,9.2,10.0; Upgrade mandrakesoft mandrake_linux_corporate_server to a higher version than 2.1,and avoid the version 2.1