CVE-2015-8326 The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user.
MediumCVSS 5.5
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libiptables-parse-perl(Debian:12) | < 1.6-1 | 1.6-1 |
| debian/libiptables-parse-perl(Debian:13) | < 1.6-1 | 1.6-1 |
| debian/libiptables-parse-perl(Debian:14) | < 1.6-1 | 1.6-1 |
| iptables-parse project iptables-parse module | = 0.5 | No fix listed |
| iptables-parse project iptables-parse module | = 0.6 | No fix listed |
| iptables-parse project iptables-parse module | = 0.7 | No fix listed |
| iptables-parse project iptables-parse module | = 0.8 | No fix listed |
| iptables-parse project iptables-parse module | = 0.9 | No fix listed |
| iptables-parse project iptables-parse module | = 1.0 | No fix listed |
| iptables-parse project iptables-parse module | = 1.1 | No fix listed |
| iptables-parse project iptables-parse module | = 1.3 | No fix listed |
| iptables-parse project iptables-parse module | = 1.3.1 | No fix listed |
| iptables-parse project iptables-parse module | = 1.4 | No fix listed |
| iptables-parse project iptables-parse module | = 1.5 | No fix listed |
| iptables-parse project iptables-parse module | = 1.6 | No fix listed |
| iptables-parse project iptables-parse module | = 1.6.1 | No fix listed |
References
- Debian Security Tracker CVE-2015-8326 vendor-advisory
- [oss-security] 20151124 Re: CVE Request: IPTables-Parse: Use of predictable names for temporary files mailing-list patch third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- github.com issue-tracking patch third-party-advisory
- metacpan.org release-notes third-party-advisory