PT-2005-1306 · Firehol · Firehol

Publicado 2005-02-06 · Atualizado 2017-07-11 · CVE-2005-0225

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions FireHOL versions prior to 1.224

Description The issue allows local users to potentially overwrite arbitrary files via a symlink attack due to the creation of temporary files with predictable file names by firehol.sh.

Recommendations For FireHOL versions prior to 1.224, update to version 1.224 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-0225

Produtos afetados

Firehol

Referências · 12

• http://securitytracker.com/id?1012969 · Nota
• https://osv.dev/vulnerability/CVE-2005-0225 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200502-01.xml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-0225 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19032 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0225 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-0225 · Aviso do Fabricante
• http://securityfocus.com/bid/12336 · Nota
• http://secunia.com/advisories/14102 · Nota
• http://osvdb.org/13137 · Nota
• http://secunia.com/advisories/13970 · Nota
• http://cvs.sourceforge.net/viewcvs.py/firehol/firehol/firehol.sh · Nota