Sysstat Insecure Temporary File Creation Vulnerability

Sysstat Insecure Temporary File Creation Vulnerability

Solution:
SGI has released an advisory (20040302-01-U) and fixes to address this issue. Please see the referenced advisory for further details on applying and obtaining fixes, fixes are linked below.

Red Hat has released advisory RHSA-2004:093-01 to address this issue.

Red Hat also released advisory RHSA-2004:053-16 for their enterprise distributions. Please see the attached advisory for details on applying and obtaining fixes.

The vendor has released Sysstat 5.0.2 to address the issue.

Gentoo has released advisory GLSA 200404-04 and fixes for this issue. They advise that users upgrade by taking the following steps at the command line:

# emerge sync
# emerge -pv ">=app-admin/sysstat-5.0.2"
# emerge ">=app-admin/sysstat-5.0.2"

Please see the referenced Gentoo advisory for more information.

SUSE has released an advisory SuSE-SA:2004:009 to address this and other issues. Please see the advisory for more information.

A Fedora legacy advisory (FLSA:1372) is available that address this issue for Red Hat Linux 7.3 running on the i386 platform. Please see the referenced advisory for more information.

RedHat sysstat-4.0.7-3.i386.rpm