CVE-2004-1167: mirrorselect before 0.89 creates temporary files in a world-writable location with predictable file names,...

Security readout for executives and security teams

CVE-2004-1167 affects old mirrorselect versions before 0.89. The tool used predictable temporary files in a shared writable location, which could let an attacker cause important files to be overwritten. Business urgency depends on whether this legacy utility still exists on managed systems. Exposure is most likely on legacy Gentoo or administrator systems where mirrorselect before 0.89 remains installed. Modern environments are unlikely to be exposed unless old packages or images are still in use. Treat this as a legacy hygiene issue unless mirrorselect before 0.89 is found in production or privileged administrative environments. Prioritize discovery first, then retire or update any vulnerable instances. Mitigation focus: Identify any mirrorselect installations and package versions.; Replace mirrorselect versions before 0.89 with vendor-supported packages.; Remove obsolete mirrorselect deployments where the tool is no longer required..

Prepared

Jun 30, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.