CVE-2007-2837

2007-07-0300:00:00

ubuntu.com

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%

JSON

The (1) getRule and (2) getChains functions in server/rules.cpp in
fireflierd (fireflier-server) in FireFlier 1.1.6 allow local users to
overwrite arbitrary files via a symlink attack on the /tmp/fireflier.rules
temporary file.

Bugs

<https://bugs.launchpad.net/ubuntu/edgy/+source/fireflier/+bug/124725>

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchfireflier< 1.1.6-2ubuntu0.6.06UNKNOWN
ubuntu7.04noarchfireflier< 1.1.6-3ubuntu0.1UNKNOWN
ubuntu7.10noarchfireflier< 1.1.7ubuntu1UNKNOWN