← Vulnerability feed

Vulnerability record · CVE-2005-2104 · published 7 October 2005

CVE-2005-2104: Redhat sysreport vulnerability

Redhat · Sysreport

sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.

2.1 CVSS 2.0 Low EPSS 0.43% · top 64.9%
2.1CVSS 2.0 base score
0.43%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
22References
16 Jun 2026Last modified by NVD

Description

sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.

AV:L/AC:L/Au:N/C:P/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/16381 Patch
http://secunia.com/advisories/17539
http://securitytracker.com/id?1014653 PatchVendor Advisory
http://www.osvdb.org/18682
http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00034.html
http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00035.html
http://www.redhat.com/support/errata/RHSA-2005-598.html PatchVendor Advisory
http://www.securityfocus.com/bid/15379
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162978 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/21770
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9411
http://secunia.com/advisories/16381 Patch
http://secunia.com/advisories/17539
http://securitytracker.com/id?1014653 PatchVendor Advisory
http://www.osvdb.org/18682
http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00034.html
http://www.redhat.com/archives/fedora-announce-list/2005-November/msg00035.html
http://www.redhat.com/support/errata/RHSA-2005-598.html PatchVendor Advisory
http://www.securityfocus.com/bid/15379
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162978 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/21770
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9411

Track CVE-2005-2104 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2005-1760Redhat sysreport vulnerabilitysysreport 1.3.15 and earlier includes contents of the up2date file in a report, which leaks the password for a proxy server in plaintext and allows l…EPSS 2.0%

Source: NIST National Vulnerability Database (record CVE-2005-2104), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.