Low 2.1Published Feb 9, 2005

CVE-2004-0975The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.

Updated under an hour ago (Nov 2, 2026, 12:10 AM ET)

Does this affect you?

It affects mandrakesoft mandrake_multi_network_firewall and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stackFree account, 3 products Every CVE for mandrakesoft mandrake_multi_network_firewall Exploited in the last 30 days

The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.

CVSS: 2.1 LOW (v2.0, NVD)AV:L/AC:L/Au:N/C:N/I:P/A:N
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Not given
NVD analysis: Modified
Record last updated: Jun 16, 2026
First seen by InfoSec Signals: Nov 1, 2026

Affected products

Affected products

mandrakesoft mandrake_multi_network_firewall mandrakesoft:mandrake_multi_network_firewall	8.2	NVD
openssl openssl openssl:openssl	0.9.6; 0.9.6a; 0.9.6b; 0.9.6c; 0.9.6d; 0.9.6e; 0.9.6f; 0.9.6g; and 8 more ranges	NVD
gentoo linux gentoo:linux	all versions	NVD
mandrakesoft mandrake_linux mandrakesoft:mandrake_linux	9.2; 9.2; 10.0; 10.0; 10.1; 10.1	NVD
mandrakesoft mandrake_linux_corporate_server mandrakesoft:mandrake_linux_corporate_server	2.1; 2.1	NVD

References

References

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136302
http://secunia.com/advisories/12973
http://www.debian.org/security/2004/dsa-603
http://www.gentoo.org/security/en/glsa/glsa-200411-15.xml
http://www.redhat.com/support/errata/RHSA-2005-476.html
http://www.securityfocus.com/bid/11293	patch, vendor-advisory
http://www.trustix.org/errata/2004/0050
https://exchange.xforce.ibmcloud.com/vulnerabilities/17583
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10621
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A164

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.