CVE-2004-0647 shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file.
MediumCVSS 4.6
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| shorewall | = 1.4 | No fix listed |
| shorewall | = 1.4.1 | No fix listed |
| shorewall | = 1.4.2 | No fix listed |
| shorewall | = 1.4.3 | No fix listed |
| shorewall | = 1.4.3a | No fix listed |
| shorewall | = 1.4.4 | No fix listed |
| shorewall | = 1.4.5 | No fix listed |
| shorewall | = 1.4.6 | No fix listed |
| shorewall | = 1.4.7 | No fix listed |
| shorewall | = 1.4.8 | No fix listed |
| shorewall | = 1.4.9 | No fix listed |
| shorewall | = 1.4.10 | No fix listed |
| shorewall | = 2.0 | No fix listed |
| shorewall | = 2.0.1 | No fix listed |
| shorewall | = 2.0.2 | No fix listed |
| shorewall | = 2.0.3 | No fix listed |
| debian/shorewall(Debian:12) | < 2.0.3a | 2.0.3a |
| debian/shorewall(Debian:13) | < 2.0.3a | 2.0.3a |
| debian/shorewall(Debian:14) | < 2.0.3a | 2.0.3a |
References
- [Shorewall-announce] 20040628 URGENT: Shorewall Security Vulnerability mailing-list
- GLSA-200407-07 patch vendor-advisory
- MDKSA-2004:080 vendor-advisory
- shorewall-symlink(16651) vdb-entry
- Debian Security Tracker CVE-2004-0647 vendor-advisory