CVE-2004-1895 : YaST Online Update (YOU) in SuSE 8.2 and 9.0 allows local users to overwrite arb

YaST Online Update (YOU) in SuSE 8.2 and 9.0 allows local users to overwrite arbitrary files via a symlink attack on you-$USER/cookies.

Published 2004-12-31 05:00:00

Updated 2025-04-03 01:03:51

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2004-1895

Suse » Suse Linux » Version: 9.0
cpe:2.3:o:suse:suse_linux:9.0:*:*:*:*:*:*:*
Matching versions
Suse » Suse Linux » Version: 8.2
cpe:2.3:o:suse:suse_linux:8.2:*:*:*:*:*:*:*
Matching versions
Suse » Suse Linux » Version: 9.0 X86 64 Edition
cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*
Matching versions

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 21 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:P/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

Jump to