CVE-2004-0968
The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a...
The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.
Exploit likelihood
What each source reports
NVD Score used
2.1
The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.
- Record
CVE-2004-0968- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.
- Record
CVE-2004-0968- Updated
- 2026-11-02
EUVDEUVD-2004-0966 No score
The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.
- Record
EUVD-2004-0966- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q8m5-35w7-x258 No score
The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a...
The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.
- Record
GHSA-q8m5-35w7-x258- Updated
- 2026-11-02
OSV No score
The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.
- Record
CVE-2004-0968- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0968 No score
The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.
- Record
DEBIAN-CVE-2004-0968- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
glibcDebian:12 |
before 2.3.2.ds1-19 | 2.3.2.ds1-19 |
glibcDebian:13 |
before 2.3.2.ds1-19 | 2.3.2.ds1-19 |
glibcDebian:14 |
before 2.3.2.ds1-19 | 2.3.2.ds1-19 |
glibcDebian:3.0 |
before 2.2.5-11.8, plus listed versions 2.2.5-11.5 |
2.2.5-11.8 |
glibcRed Hat:enterprise_linux:3::as |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-commonRed Hat:enterprise_linux:3::as |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-debuginfoRed Hat:enterprise_linux:3::as |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-debuginfo-commonRed Hat:enterprise_linux:3::as |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-develRed Hat:enterprise_linux:3::as |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-headersRed Hat:enterprise_linux:3::as |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
Show 34 moreShow less
| Package | Affected | Fixed |
|---|---|---|
glibc-profileRed Hat:enterprise_linux:3::as |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-utilsRed Hat:enterprise_linux:3::as |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
nptl-develRed Hat:enterprise_linux:3::as |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
nscdRed Hat:enterprise_linux:3::as |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibcRed Hat:enterprise_linux:3::desktop |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-commonRed Hat:enterprise_linux:3::desktop |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-debuginfo-commonRed Hat:enterprise_linux:3::desktop |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-develRed Hat:enterprise_linux:3::desktop |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-headersRed Hat:enterprise_linux:3::desktop |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-profileRed Hat:enterprise_linux:3::desktop |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-utilsRed Hat:enterprise_linux:3::desktop |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
nptl-develRed Hat:enterprise_linux:3::desktop |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
nscdRed Hat:enterprise_linux:3::desktop |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibcRed Hat:enterprise_linux:3::es |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-commonRed Hat:enterprise_linux:3::es |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-debuginfoRed Hat:enterprise_linux:3::es |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-debuginfo-commonRed Hat:enterprise_linux:3::es |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-develRed Hat:enterprise_linux:3::es |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-headersRed Hat:enterprise_linux:3::es |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-profileRed Hat:enterprise_linux:3::es |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-utilsRed Hat:enterprise_linux:3::es |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
nptl-develRed Hat:enterprise_linux:3::es |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
nscdRed Hat:enterprise_linux:3::es |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibcRed Hat:enterprise_linux:3::ws |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-commonRed Hat:enterprise_linux:3::ws |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-debuginfo-commonRed Hat:enterprise_linux:3::ws |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-develRed Hat:enterprise_linux:3::ws |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-headersRed Hat:enterprise_linux:3::ws |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-profileRed Hat:enterprise_linux:3::ws |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
glibc-utilsRed Hat:enterprise_linux:3::ws |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
nptl-develRed Hat:enterprise_linux:3::ws |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
nscdRed Hat:enterprise_linux:3::ws |
before 0:2.3.2-95.30 | 0:2.3.2-95.30 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0968 is a low vulnerability (CVSS 2.1) in Gnu Glibc, published October 20, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in glibc 2.3.2.ds1-19.
References
debian.org/security/2005/dsa-636
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9523
redhat.com/support/errata/RHSA-2005-261.html
exchange.xforce.ibmcloud.com/vulnerabilities/17583
securityfocus.com/bid/11286
ubuntu.com/usn/usn-4-1
Show 21 moreShow less
security.gentoo.org/glsa/glsa-200410-19.xml
trustix.org/errata/2004/0050
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136318
redhat.com/support/errata/RHSA-2004-586.html
nvd.nist.gov/vuln/detail/CVE-2004-0968
github.com/advisories/GHSA-q8m5-35w7-x258
security-tracker.debian.org/tracker/CVE-2004-0968
access.redhat.com/errata/RHSA-2004:586
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=103415
bugzilla.redhat.com/show_bug.cgi?id=118574
bugzilla.redhat.com/show_bug.cgi?id=123583
bugzilla.redhat.com/show_bug.cgi?id=127606
bugzilla.redhat.com/show_bug.cgi?id=130254
bugzilla.redhat.com/show_bug.cgi?id=132204
bugzilla.redhat.com/show_bug.cgi?id=132816
bugzilla.redhat.com/show_bug.cgi?id=136318
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_586.json
access.redhat.com/security/cve/CVE-2004-0968
bugzilla.redhat.com/show_bug.cgi?id=1617335
cve.org/CVERecord?id=CVE-2004-0968