CVE-2004-1167

CVE-2004-1167 describes a vulnerability in mirrorselect versions prior to 0.89, where temporary files are created in a world-writable directory with predictable names. This flaw allows remote attackers to perform a symlink attack, potentially overwriting arbitrary files on the system. With a CVSS score of 5.0, this vulnerability is considered medium severity, requiring no authentication and having low attack complexity, but primarily impacting integrity (partial). While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the CVE has garnered significant community discussion with 10 mentions, indicating awareness among security researchers.