CVE-2004-0559: Mandrakesoft Mandrake Linux

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory.

Affected products

• Mandrakesoft Mandrake Linux: version 9.2 only; version 10.0 only
• Mandrakesoft Mandrake Linux Corporate Server: version 2.1 only
• Usermin Usermin: version 1.000 only; version 1.010 only; version 1.020 only; version 1.030 only; version 1.040 only; version 1.051 only; …
• Webmin Webmin: version 1.0.00 only; version 1.0.20 only; version 1.0.50 only; version 1.0.60 only; version 1.0.70 only; version 1.0.80 only; …

Published 2004-10-20. Last modified 2026-06-16.