CVE-2004-0975
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other...
CVE-2004-0975 is a low vulnerability (CVSS 2.1) in Gentoo Linux, published October 20, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in openssl 0.9.7e-3.
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
Exploit likelihood
What each source reports
NVD Score used
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
- Record
CVE-2004-0975- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
- Record
CVE-2004-0975- Updated
- 2026-11-02
EUVDEUVD-2004-0973 No score
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
- Record
EUVD-2004-0973- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-53cg-whph-j92f No score
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other...
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
- Record
GHSA-53cg-whph-j92f- Updated
- 2026-11-02
OSV No score
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
- Record
CVE-2004-0975- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0975 No score
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
- Record
DEBIAN-CVE-2004-0975- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
opensslDebian:12 |
before 0.9.7e-3 | 0.9.7e-3 |
opensslDebian:13 |
before 0.9.7e-3 | 0.9.7e-3 |
opensslDebian:14 |
before 0.9.7e-3 | 0.9.7e-3 |
opensslDebian:3.0 |
before 0.9.6c-2.woody.7 | 0.9.6c-2.woody.7 |
opensslRed Hat:enterprise_linux:3::as |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl-debuginfoRed Hat:enterprise_linux:3::as |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl-develRed Hat:enterprise_linux:3::as |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl-perlRed Hat:enterprise_linux:3::as |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl096bRed Hat:enterprise_linux:3::as |
before 0:0.9.6b-16.22.3 | 0:0.9.6b-16.22.3 |
openssl096b-debuginfoRed Hat:enterprise_linux:3::as |
before 0:0.9.6b-16.22.3 | 0:0.9.6b-16.22.3 |
Show 42 moreShow less
| Package | Affected | Fixed |
|---|---|---|
opensslRed Hat:enterprise_linux:3::desktop |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl-develRed Hat:enterprise_linux:3::desktop |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl-perlRed Hat:enterprise_linux:3::desktop |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl096bRed Hat:enterprise_linux:3::desktop |
before 0:0.9.6b-16.22.3 | 0:0.9.6b-16.22.3 |
openssl096b-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:0.9.6b-16.22.3 | 0:0.9.6b-16.22.3 |
opensslRed Hat:enterprise_linux:3::es |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl-debuginfoRed Hat:enterprise_linux:3::es |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl-develRed Hat:enterprise_linux:3::es |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl-perlRed Hat:enterprise_linux:3::es |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl096bRed Hat:enterprise_linux:3::es |
before 0:0.9.6b-16.22.3 | 0:0.9.6b-16.22.3 |
openssl096b-debuginfoRed Hat:enterprise_linux:3::es |
before 0:0.9.6b-16.22.3 | 0:0.9.6b-16.22.3 |
opensslRed Hat:enterprise_linux:3::ws |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl-develRed Hat:enterprise_linux:3::ws |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl-perlRed Hat:enterprise_linux:3::ws |
before 0:0.9.7a-33.15 | 0:0.9.7a-33.15 |
openssl096bRed Hat:enterprise_linux:3::ws |
before 0:0.9.6b-16.22.3 | 0:0.9.6b-16.22.3 |
openssl096b-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:0.9.6b-16.22.3 | 0:0.9.6b-16.22.3 |
opensslRed Hat:enterprise_linux:4::as |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl-debuginfoRed Hat:enterprise_linux:4::as |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl-develRed Hat:enterprise_linux:4::as |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl-perlRed Hat:enterprise_linux:4::as |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl096bRed Hat:enterprise_linux:4::as |
before 0:0.9.6b-22.3 | 0:0.9.6b-22.3 |
openssl096b-debuginfoRed Hat:enterprise_linux:4::as |
before 0:0.9.6b-22.3 | 0:0.9.6b-22.3 |
opensslRed Hat:enterprise_linux:4::desktop |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl-develRed Hat:enterprise_linux:4::desktop |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl-perlRed Hat:enterprise_linux:4::desktop |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl096bRed Hat:enterprise_linux:4::desktop |
before 0:0.9.6b-22.3 | 0:0.9.6b-22.3 |
openssl096b-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:0.9.6b-22.3 | 0:0.9.6b-22.3 |
opensslRed Hat:enterprise_linux:4::es |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl-debuginfoRed Hat:enterprise_linux:4::es |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl-develRed Hat:enterprise_linux:4::es |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl-perlRed Hat:enterprise_linux:4::es |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl096bRed Hat:enterprise_linux:4::es |
before 0:0.9.6b-22.3 | 0:0.9.6b-22.3 |
openssl096b-debuginfoRed Hat:enterprise_linux:4::es |
before 0:0.9.6b-22.3 | 0:0.9.6b-22.3 |
opensslRed Hat:enterprise_linux:4::ws |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl-develRed Hat:enterprise_linux:4::ws |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl-perlRed Hat:enterprise_linux:4::ws |
before 0:0.9.7a-43.2 | 0:0.9.7a-43.2 |
openssl096bRed Hat:enterprise_linux:4::ws |
before 0:0.9.6b-22.3 | 0:0.9.6b-22.3 |
openssl096b-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:0.9.6b-22.3 | 0:0.9.6b-22.3 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
gentoo.org/security/en/glsa/glsa-200411-15.xml
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136302
exchange.xforce.ibmcloud.com/vulnerabilities/17583
trustix.org/errata/2004/0050
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A164
debian.org/security/2004/dsa-603
Show 20 moreShow less
redhat.com/support/errata/RHSA-2005-476.html
securityfocus.com/bid/11293
secunia.com/advisories/12973
nvd.nist.gov/vuln/detail/CVE-2004-0975
github.com/advisories/GHSA-53cg-whph-j92f
security-tracker.debian.org/tracker/CVE-2004-0975
access.redhat.com/errata/RHSA-2005:476
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_476.json
cve.org/CVERecord?id=CVE-2004-0975