[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247768

 
 

909

 
 

194555

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2009-4664Date: (C)2010-03-03   (M)2023-12-22


Firewall Builder 3.0.4, 3.0.5, and 3.0.6, when running on Linux, allows local users to gain privileges via a symlink attack on an unspecified temporary file that is created by the iptables script.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 3.3
Exploit Score: 3.4
Impact Score: 4.9
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
BID-36468
SECUNIA-36809
OSVDB-58247
ADV-2010-0389
FEDORA-2010-0157
firewallbuilder-temp-symlink(53392)
http://blog.fwbuilder.org/2009/09/firewall-builder-v307-released.html
http://www.fwbuilder.org/docs/firewall_builder_release_notes.html#3.0.7
https://bugzilla.redhat.com/show_bug.cgi?id=524588

CPE    1
cpe:/o:linux:linux_kernel
CWE    1
CWE-59

© SecPod Technologies