Approved changes feed: RSS · Atom

cpe:2.3:a:sysstat:sysstat:4.1.3:*:*:*:*:*:*:*

part: a version: 4.1.3 update: *

VendorSysstat (44c967ef-5751-5cd4-903b-43662ba877c6)
ProductSysstat (09116f7d-c227-55c9-aae9-8edde8972ed2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/sysstat purl2cpe 2026-06-01 10:15:37.298499
pkg:deb/ubuntu/sysstat purl2cpe 2026-06-01 10:15:37.298500
pkg:github/sysstat/sysstat purl2cpe 2026-06-01 10:15:37.298502
pkg:gitlab/redhat/sysstat purl2cpe 2026-06-01 10:15:37.298503
pkg:rpm/fedora/sysstat purl2cpe 2026-06-01 10:15:37.298505
pkg:rpm/opensuse/sysstat purl2cpe 2026-06-01 10:15:37.298506

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-0108 vulnerable 2026-06-08 04:47:48.527996 Details available
The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T00:10:03.343Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0107 vulnerable 2026-06-08 04:47:48.524280 Details available
The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.
Published: 2004-03-16T05:00:00.000Z
Updated: 2024-08-08T00:10:02.321Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.