CVE:CVE-2004-0975
CNNVD:CNNVD-200502-020
OpenSSL是一套开放源代码的SSL套件。
Trustix Secure Linux 1.5至2.1以及其他操作系统的openssl程序包中的der_chop脚本，可让本地用户通过象征性的链接攻击临时文件，从而覆盖这些文件。
solution:Upgrade mandrakesoft mandrake_multi_network_firewall to a higher version than 8.2,and avoid the version 8.2; Upgrade openssl openssl to a higher version than 0.9.6,0.9.6a,0.9.6b,0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.6l,0.9.6m,0.9.7c,0.9.7d,and avoid the version 0.9.6,0.9.6a,0.9.6b,0.9.6c,0.9.6d,0.9.6e,0.9.6f,0.9.6g,0.9.6h,0.9.6i,0.9.6j,0.9.6k,0.9.6l,0.9.6m,0.9.7c,0.9.7d; Upgrade gentoo linux to a higher version than *; Upgrade mandrakesoft mandrake_linux to a higher version than 9.2,10.0,10.1,and avoid the version 9.2,10.0,10.1; Upgrade mandrakesoft mandrake_linux_corporate_server to a higher version than 2.1,and avoid the version 2.1