Vulnerability in Cipherdyne Fwsnort
CVE-2014-0039
Untrusted search path vulnerability in fwsnort before 1.6.4, when not running as root, allows local users to execute arbitrary code via a Trojan horse fwsnort.conf in the current working directory.
EPSS: 0.006 (45.2th percentile) — read the EPSS interpretation.
Affected products
- Cipherdyne Fwsnort — versions 0.5, 0.6, 0.6.1
- N/a — versions n/a
References
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)
- secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)
- secalert@redhat.com (x_refsource_OSVDB, vdb-entry)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (x_refsource_CONFIRM, Exploit, Patch)
- secalert@redhat.com (mailing-list, x_refsource_MLIST)