CVE-2004-0581: GNU Ksymoops

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.

Affected products

• GNU Ksymoops: version 2.4.5 only; version 2.4.8 only; version 2.4.9 only
• Mandrakesoft Mandrake Linux: version 9.1 only; version 9.2 only; version 10.0 only
• Mandrakesoft Mandrake Linux Corporate Server: version 2.1 only

Published 2004-08-06. Last modified 2026-06-16.