ID SECURITYVULNS:VULN:3831
Type securityvulns
Reporter BUGTRAQ
Modified 2004-07-09T00:00:00
Description
Temporary files and directories are created in unsafe manner.
{"id": "SECURITYVULNS:VULN:3831", "bulletinFamily": "software", "title": "Shorewall symbolic links problem", "description": "Temporary files and directories are created in unsafe manner.", "published": "2004-07-09T00:00:00", "modified": "2004-07-09T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:3831", "reporter": "BUGTRAQ", "references": ["https://vulners.com/securityvulns/securityvulns:doc:6467"], "cvelist": [], "type": "securityvulns", "lastseen": "2018-08-31T11:09:18", "edition": 1, "viewCount": 0, "enchantments": {"score": {"value": 6.0, "vector": "NONE", "modified": "2018-08-31T11:09:18", "rev": 2}, "dependencies": {"references": [{"type": "apple", "idList": ["APPLE:HT210918"]}, {"type": "cve", "idList": ["CVE-2018-18492", "CVE-2018-12405", "CVE-2018-18498", "CVE-2018-18494", "CVE-2018-18493", "CVE-2020-3831", "CVE-2019-3831"]}, {"type": "attackerkb", "idList": ["AKB:7386CFE2-88AF-4E79-9D39-ED7781C607C8"]}, {"type": "nessus", "idList": ["ORACLELINUX_ELSA-2018-3831.NASL", "REDHAT-RHSA-2018-3831.NASL", "PHOTONOS_PHSA-2019-1_0-0205_ELASTICSEARCH.NASL", "REDHAT-RHSA-2019-0458.NASL", "CENTOS_RHSA-2018-3831.NASL", "REDHAT-RHSA-2019-0457.NASL"]}, {"type": "redhat", "idList": ["RHSA-2019:0458", "RHSA-2019:0457"]}, {"type": "openvas", "idList": ["OPENVAS:1361412562310882990"]}, {"type": "centos", "idList": ["CESA-2018:3831"]}, {"type": "oraclelinux", "idList": ["ELSA-2018-3831"]}, {"type": "securityvulns", "idList": ["SECURITYVULNS:DOC:6467"]}], "modified": "2018-08-31T11:09:18", "rev": 2}, "vulnersScore": 6.0}, "affectedSoftware": [{"name": "Shorewall", "operator": "eq", "version": "1.4"}]}
{"rst": [{"lastseen": "2021-01-24T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **ba-ham[.]ir** in [RST Threat Feed](https://rstcloud.net/profeed) with score **10**.\n First seen: 2019-12-19T03:00:00, Last seen: 2021-01-24T03:00:00.\n IOC tags: **generic**.\nIOC could be a **False Positive** (Domain not resolved. Whois records not found).\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2019-12-19T00:00:00", "id": "RST:E79FB923-A4B6-3831-822F-A98E56F96E96", "href": "", "published": "2021-01-25T00:00:00", "title": "RST Threat feed. IOC: ba-ham.ir", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-24T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **myskoler[.]com** in [RST Threat Feed](https://rstcloud.net/profeed) with score **46**.\n First seen: 2021-01-22T03:00:00, Last seen: 2021-01-24T03:00:00.\n IOC tags: **generic**.\nDomain has DNS A records: 34[.]102.136.180\nWhois:\n Created: 2021-01-19 15:55:51, \n Registrar: GoDaddycom LLC, \n Registrant: unknown.\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2021-01-22T00:00:00", "id": "RST:783BEC9C-0AD9-3831-9C56-25DEE10DF92C", "href": "", "published": "2021-01-25T00:00:00", "title": "RST Threat feed. IOC: myskoler.com", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-24T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **enmetec[.]de** in [RST Threat Feed](https://rstcloud.net/profeed) with score **22**.\n First seen: 2020-12-22T03:00:00, Last seen: 2021-01-24T03:00:00.\n IOC tags: **generic**.\nDomain has DNS A records: 193[.]141.3.74,217.160.80.140\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-22T00:00:00", "id": "RST:37763B4E-7CBE-3831-8140-FA9CEEC6F5A1", "href": "", "published": "2021-01-25T00:00:00", "title": "RST Threat feed. IOC: enmetec.de", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-24T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **shv4b[.]getmyip.com** in [RST Threat Feed](https://rstcloud.net/profeed) with score **10**.\n First seen: 2020-12-22T03:00:00, Last seen: 2021-01-24T03:00:00.\n IOC tags: **generic**.\nIOC could be a **False Positive** (Domain not resolved. Whois records not found).\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-22T00:00:00", "id": "RST:30821368-1093-3831-A23E-2ECF85E2DFA1", "href": "", "published": "2021-01-25T00:00:00", "title": "RST Threat feed. IOC: shv4b.getmyip.com", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-24T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **siccmamedia[.]de** in [RST Threat Feed](https://rstcloud.net/profeed) with score **22**.\n First seen: 2020-12-22T03:00:00, Last seen: 2021-01-24T03:00:00.\n IOC tags: **generic**.\nDomain has DNS A records: 136[.]243.165.17\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-22T00:00:00", "id": "RST:B54FBF7A-16CD-3831-945E-04BABB206A6B", "href": "", "published": "2021-01-25T00:00:00", "title": "RST Threat feed. IOC: siccmamedia.de", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-24T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **upgradenote[.]thealways4aptituding.download** in [RST Threat Feed](https://rstcloud.net/profeed) with score **10**.\n First seen: 2020-12-22T03:00:00, Last seen: 2021-01-24T03:00:00.\n IOC tags: **generic**.\nIOC could be a **False Positive** (Domain not resolved. Whois records not found).\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-22T00:00:00", "id": "RST:73ACD6FD-8B8D-3831-AA81-018DB8CAE3B2", "href": "", "published": "2021-01-25T00:00:00", "title": "RST Threat feed. IOC: upgradenote.thealways4aptituding.download", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-24T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **unlokurhip[.]bid** in [RST Threat Feed](https://rstcloud.net/profeed) with score **10**.\n First seen: 2019-12-15T03:00:00, Last seen: 2021-01-24T03:00:00.\n IOC tags: **spam**.\nIOC could be a **False Positive** (Domain not resolved. Whois records not found).\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2019-12-15T00:00:00", "id": "RST:BC29A375-95F1-3831-878C-F67FA3A4E78B", "href": "", "published": "2021-01-25T00:00:00", "title": "RST Threat feed. IOC: unlokurhip.bid", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-24T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **up[.]noip.cn** in [RST Threat Feed](https://rstcloud.net/profeed) with score **22**.\n First seen: 2020-12-22T03:00:00, Last seen: 2021-01-24T03:00:00.\n IOC tags: **generic**.\nDomain has DNS A records: 113[.]28.187.169\nWhois:\n Created: 2005-05-01 21:00:38, \n Registrar: , \n Registrant: unknown.\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-22T00:00:00", "id": "RST:C6F0C1E4-9E0B-3831-994F-C3274370FC0C", "href": "", "published": "2021-01-25T00:00:00", "title": "RST Threat feed. IOC: up.noip.cn", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-24T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **remsant[.]by** in [RST Threat Feed](https://rstcloud.net/profeed) with score **10**.\n First seen: 2019-12-19T03:00:00, Last seen: 2021-01-24T03:00:00.\n IOC tags: **generic**.\nIOC could be a **False Positive** (Domain not resolved. Whois records not found).\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2019-12-19T00:00:00", "id": "RST:EBAC3219-7C33-3831-B26C-DFC2CC8C8DD5", "href": "", "published": "2021-01-25T00:00:00", "title": "RST Threat feed. IOC: remsant.by", "type": "rst", "cvss": {}}, {"lastseen": "2021-01-24T00:00:00", "bulletinFamily": "ioc", "cvelist": [], "description": "Found **campinasfight[.]com.br** in [RST Threat Feed](https://rstcloud.net/profeed) with score **22**.\n First seen: 2020-12-22T03:00:00, Last seen: 2021-01-24T03:00:00.\n IOC tags: **generic**.\nDomain has DNS A records: 35[.]231.6.49\nWhois:\n Created: 2016-04-09 21:00:00, \n Registrar: unknown, \n Registrant: unknown.\n[https://rstcloud.net/](https://rstcloud.net/)", "edition": 1, "modified": "2020-12-22T00:00:00", "id": "RST:DC7B1E51-AADE-3831-A990-A0EEF9BB1B69", "href": "", "published": "2021-01-25T00:00:00", "title": "RST Threat feed. IOC: campinasfight.com.br", "type": "rst", "cvss": {}}]}