CVE-2004-0974: Mandrakesoft Mandrake Linux

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

Affected products

• Mandrakesoft Mandrake Linux: version 9.2 only; version 10.0 only; version 10.1 only
• Mandrakesoft Mandrake Linux Corporate Server: version 2.1 only
• Netatalk Open Source Apple File Share Protocol Suite: version 1.5_pre6 only; version 1.6.1 only; version 1.6.4 only
• Red Hat Fedora Core: version core_2.0 only; version core_3.0 only

Published 2005-02-09. Last modified 2026-06-16.