CVE-2007-2837 The (1) getRule and (2) getChains functions in server/rules.cpp in fireflierd (fireflier-server) in FireFlier 1.1.6 allow local users to overwrite arbitrary files via a symlink attack on the /tmp/fire...
LowCVSS 3.6
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) getRule and (2) getChains functions in server/rules.cpp in fireflierd (fireflier-server) in FireFlier 1.1.6 allow local users to overwrite arbitrary files via a symlink attack on the /tmp/fireflier.rules temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fireflier | = 1.1.6 | No fix listed |
References
- bugs.debian.org patch
- 37803 vdb-entry
- 25900 third-party-advisory vendor-advisory
- 25913 patch third-party-advisory vendor-advisory
- DSA-1326 patch vendor-advisory
- 24718 vdb-entry
- fireflier-getchains-symlink(35226) vdb-entry