Vulnerability in Snortcenter

CVE-2002-1970

SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passwords for the alert database servers.

EPSS: 0.004 (30.4th percentile) — read the EPSS interpretation.

Affected products

Snortcenter — versions 0.9.5
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Patch)