CVE-2014-3986 include/tests_webservers in Lynis before 1.5.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.*.unsorted file with an easily determined name.
LowCVSS 3.3
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
include/tests_webservers in Lynis before 1.5.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.*.unsorted file with an easily determined name.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/lynis(Debian:12) | < 1.5.5-1 | 1.5.5-1 |
| debian/lynis(Debian:13) | < 1.5.5-1 | 1.5.5-1 |
| debian/lynis(Debian:14) | < 1.5.5-1 | 1.5.5-1 |
| cisofy lynis | <= 1.5.4 | No fix listed |
| cisofy lynis | = 1.5.0 | No fix listed |
| cisofy lynis | = 1.5.1 | No fix listed |
| cisofy lynis | = 1.5.2 | No fix listed |
| cisofy lynis | = 1.5.3 | No fix listed |
References
- Debian Security Tracker CVE-2014-3986 vendor-advisory
- cisofy.com
- [oss-security] 20140605 CVE request: PHP configure script and Lynis tool /tmp/ issues reported on full disclosure mailing-list
- [oss-security] 20140606 Re: CVE request: PHP configure script and Lynis tool /tmp/ issues reported on full disclosure mailing-list
- [oss-security] 20140606 Re: CVE request: PHP configure script and Lynis tool /tmp/ issues reported on full disclosure mailing-list
- 20140604 More /tmp fun (PHP, Lynis) mailing-list
- bugs.debian.org issue-tracking