CVE-2014-0039

CVE-2014-0039 affects fwsnort versions prior to 1.6.4. The vulnerability arises from an untrusted search path: if fwsnort is not run as root, a local user can place a trojan horse fwsnort.conf in the current working directory to execute arbitrary code. Public advisories (Amazon Linux ALAS-2014-40...