CVE-2004-2502
im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a...
im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file.
Exploit likelihood
What each source reports
NVD Score used
im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file.
- Record
CVE-2004-2502- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file.
- Record
CVE-2004-2502- Updated
- 2026-11-02
EUVDEUVD-2004-2493 No score
im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file.
- Record
EUVD-2004-2493- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-62jm-23c8-x8jq No score
im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a...
im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file.
- Record
GHSA-62jm-23c8-x8jq- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | IM-Switch - Insecure Temporary File Handling Symbolic Link | 2004-07-13 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-2502 is a low vulnerability (CVSS 2.1) in Im-switch, published December 31, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.89%, the 59th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/16682
securityfocus.com/bid/10717
packetstormsecurity.org/0407-advisories/fedora_im-switch_tempfile_race.txt
secunia.com/advisories/12037
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126940
osvdb.org/7772
nvd.nist.gov/vuln/detail/CVE-2004-2502
github.com/advisories/GHSA-62jm-23c8-x8jq