CVE-2004-0975: Gentoo Linux

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.

Affected products

• Gentoo Linux: any version
• Mandrakesoft Mandrake Linux: version 9.2 only; version 10.0 only; version 10.1 only
• Mandrakesoft Mandrake Linux Corporate Server: version 2.1 only
• Mandrakesoft Mandrake Multi Network Firewall: version 8.2 only
• OpenSSL OpenSSL: version 0.9.6 only; version 0.9.6a only; version 0.9.6b only; version 0.9.6c only; version 0.9.6d only; version 0.9.6e only; …

Published 2005-02-09. Last modified 2026-06-16.