CVE-2009-4664

CVE-2009-4664 affects Firewall Builder (fwbuilder) on Linux, covering versions 3.0.4–3.0.6. A local user can exploit insecure temporary-file handling in the iptables/fwb_install scripts to perform a symlink attack and escalate privileges, potentially overwriting files with the caller’s privileges...