CVE-2004-2698

CVE-2004-2698 describes a race condition in IMWheel 1.0.0pre11 and earlier, specifically when the -k option is used. This vulnerability allows local users to exploit a symlink attack on the imwheel.pid file, leading to a denial of service (IMWheel crash) and potentially arbitrary file modification. The CVSS score of 6.9 indicates a medium severity, with a local attack vector and medium attack complexity, resulting in high impacts to confidentiality, integrity, and availability. While no active exploitation is noted and it's not on the KEV catalog, a predictable temporary file creation exploit for IMWheel 1.0 exists on ExploitDB, though there is minimal community discussion or media coverage.