The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users to execute arbitrary code.
2007-08-14T18:17:00.000
2025-04-09T00:30:58.490
Deferred
CVSSv2: 4.4 (MEDIUM)
AV:L/AC:M/Au:N/C:P/I:P/A:P
3.4
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | sysstat | sysstat | 5.1.2 | Yes |
| Application | sysstat | sysstat | 5.1.3 | Yes |
| Application | sysstat | sysstat | 5.1.4 | Yes |
| Application | sysstat | sysstat | 5.1.5 | Yes |
| Application | sysstat | sysstat | 6.0.0 | Yes |
| Application | sysstat | sysstat | 6.0.1 | Yes |
| Application | sysstat | sysstat | 6.0.2 | Yes |
| Application | sysstat | sysstat | 6.0.3 | Yes |
| Application | sysstat | sysstat | 6.0.4 | Yes |
| Application | sysstat | sysstat | 6.0.5 | Yes |
| Application | sysstat | sysstat | 7.0.0 | Yes |
| Application | sysstat | sysstat | 7.0.1 | Yes |
| Application | sysstat | sysstat | 7.0.2 | Yes |
| Application | sysstat | sysstat | 7.0.3 | Yes |
| Application | sysstat | sysstat | 7.0.4 | Yes |
| Application | sysstat | sysstat | 7.1.1 | Yes |
| Application | sysstat | sysstat | 7.1.2 | Yes |
| Application | sysstat | sysstat | 7.1.3 | Yes |
| Application | sysstat | sysstat | 7.1.4 | Yes |
| Application | sysstat | sysstat | 7.1.5 | Yes |
| Application | sysstat | sysstat | 7.1.6 | Yes |