Lucene search
HistoryJul 03, 2007 - 6:30 p.m.
CVE-2007-2837
cve-2007-2837
fireflier
symlink attack
nvd
file overwrite
server security
3.6 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
The (1) getRule and (2) getChains functions in server/rules.cpp in fireflierd (fireflier-server) in FireFlier 1.1.6 allow local users to overwrite arbitrary files via a symlink attack on the /tmp/fireflier.rules temporary file.
Affected configurations
Node
debiandebian_linuxMatch3.1
ORdebiandebian_linuxMatch4.0
ORdebiandebian_linuxMatch4.0alpha
ORdebiandebian_linuxMatch4.0amd64
ORdebiandebian_linuxMatch4.0arm
ORdebiandebian_linuxMatch4.0ia-32
ORdebiandebian_linuxMatch4.0ia-64
ORdebiandebian_linuxMatch4.0mips
ORdebiandebian_linuxMatch4.0powerpc
ORdebiandebian_linuxMatch4.0s390
ORdebiandebian_linuxMatch4.0sparc
fireflierfireflierMatch1.1.6
| CPE | Name | Operator | Version |
|---|---|---|---|
| fireflier:fireflier | fireflier | eq | 1.1.6 |
Related
nessus
nessus
Debian DSA-1326-1 : fireflier-server - insecure temporary files
2007-07-02 00:00:00
ubuntucve
ubuntucve
CVE-2007-2837
2007-07-03 00:00:00
osv
osv
fireflier
2007-07-01 00:00:00
nvd
nvd
CVE-2007-2837
2007-07-03 18:30:00
securityvulns
securityvulns
cvelist
cvelist
CVE-2007-2837
2007-07-03 18:00:00
openvas
openvas
Debian: Security Advisory (DSA-1326-1)
2008-01-17 00:00:00
Debian Security Advisory DSA 1326-1 (fireflier-server)
2008-01-17 00:00:00
prion
prion
Design/Logic Flaw
2007-07-03 18:30:00
debian
debian
3.6 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:P/A:P
6.1 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2007-2837