CVE-2004-0107: The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary...

Security readout for executives and security teams

CVE-2004-0107 affects sysstat 4.0.7 and earlier. Local users could abuse unsafe temporary-file handling in package post/trigger scripts to overwrite files through symlinks. This is mainly a legacy-system risk, but it matters where old Linux/Unix servers still run unpatched sysstat packages. Exposure is most likely on legacy systems running sysstat 4.0.7 or earlier, particularly distributions covered by historical Red Hat and SGI advisories. Modern managed distributions are unlikely to be affected unless old packages remain installed. Treat as a cleanup priority for legacy estate risk, not an internet-wide emergency. Focus on servers with old operating systems, local user access, or unsupported packages. Remediation should be included in legacy hardening and upgrade programs. Mitigation focus: Inventory systems for sysstat 4.0.7 or earlier.; Apply applicable vendor updates from Red Hat, SGI, or current distribution maintainers.; Remove sysstat where it is not required on legacy systems..

Prepared

Jul 12, 2026, 01:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.