CVE-2004-0972

The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

• How can I get the fixes?
• What do statuses mean?

References

• MITRE
• NVD
• Launchpad
• Debian

Related Ubuntu Security Notices (USN)

• USN-15-1
• lvm10 vulnerability
• 2 November 2004

Other references

• https://www.cve.org/CVERecord?id=CVE-2004-0972