Lucene search
MitreCVELIST:CVE-2014-5284HistoryDec 02, 2014 - 1:00 a.m.
CVE-2014-5284
2014-12-0201:00:00
mitre
www.cve.org
1
host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, which allows local users to modify access restrictions in hosts.deny and gain root privileges by creating the temporary files before automatic IP blocking is performed.
Related
packetstorm
packetstorm
OSSEC 2.8 Privilege Escalation
2014-11-14 00:00:00
cve
cve
CVE-2014-5284
2014-12-02 01:59:04
freebsd
freebsd
security/ossec-hids-* -- root escalation via temp files
2014-09-09 00:00:00
prion
prion
Design/Logic Flaw
2014-12-02 01:59:00
zdt
zdt
nessus
nessus
nvd
nvd
CVE-2014-5284
2014-12-02 01:59:04
exploitdb
exploitdb
OSSEC 2.8 - 'hosts.deny' Local Privilege Escalation
2014-11-14 00:00:00