CVE-2004-2605: Astats

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1) the aStats-Graphic-Signature-Generation file and (2) certain PNG image files.

Affected products

• Astats Astats: version 1.6.5 only

Published 2004-12-31. Last modified 2026-06-16.