CVE-2004-2502

Published: Dec 31, 2004Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file.

Affected (1)

Products: Im Switch: Im Switch

Im Switch

1 product

Im Switch

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Im Switch Im Switch	All versions

References (12)

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126940

Source: cve@mitre.org

http://packetstormsecurity.org/0407-advisories/fedora_im-switch_tempfile_race.txt

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/12037

Source: cve@mitre.org

PatchVendor Advisory

http://www.osvdb.org/7772

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/10717

Source: cve@mitre.org

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/16682

Source: cve@mitre.org

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126940