CVE-2004-0966 json
The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 throug…
published 2004-10-20 22 y ago modified 2026-06-16 4 mo ago also EUVD-2004-0964
- cvss
- 2.1
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 34%
- public exploits
- 0
- none known
Summary
The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
Patch / fix
- gettext Debian 14, Debian 13, Debian 12 0.14.1-6
debian advisories DEBIAN-CVE-2004-0966
- securityfocus.com/bid/11282 advisory
Exploit prediction
0.40% chance of exploitation in the next 30 days, higher than 34% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 2.1 | AV:L/AC:L/Au:N/C:N/I:P/A:N |
References
-
securityfocus.com
/bid/11282
vdb-entry, patch, vendor-advisory
-
redhat.com
/archives/fedora-legacy-announce/2006-January/msg00000.html
vendor-advisory
-
marc.info
/?l=bugtraq&m=110382652226638&w=2
vendor-advisory
-
gentoo.org
/security/en/glsa/glsa-200410-10.xml
vendor-advisory
-
trustix.org
/errata/2004/0050
vendor-advisory
-
ubuntu.com
/usn/usn-5-1/
vendor-advisory
-
wwwnew.mandriva.com
/security/advisories?name=MDKSA-2006:051
vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/17583
vdb-entry
- bugzilla.redhat.com /bugzilla/show_bug.cgi?id=136323
Sources
- CVE List CVE-2004-0966
- NVD CVE-2004-0966
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.