Red Hat Sysstat vulnerabilities

2 CVEs affecting Red Hat Sysstat, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-0108, published 2004-04-15.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2004-0107, published 2004-04-15. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.
• CVE-2004-0108, published 2004-04-15. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.