CVE-2014-0039

Untrusted search path vulnerability in fwsnort before 1.6.4, when not running as root, allows local users to execute arbitrary code via a Trojan horse fwsnort.conf in the current working directory.

🔗 References (14)

• secalert@redhathttp://lists.fedoraproject.org/pipermail/package-announce/2014-February/128188.html
• secalert@redhathttp://lists.fedoraproject.org/pipermail/package-announce/2014-February/128205.html
• secalert@redhathttp://osvdb.org/102822
• secalert@redhathttp://seclists.org/oss-sec/2014/q1/221
• secalert@redhathttp://www.securityfocus.com/bid/65341
• secalert@redhathttps://github.com/mrash/fwsnort/blob/master/ChangeLog
• secalert@redhathttps://github.com/mrash/fwsnort/commit/fa977453120cc48e1654f373311f9cac468d3348
• af854a3a-2127-422b-91ae-364da2661108http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128188.html
• af854a3a-2127-422b-91ae-364da2661108http://lists.fedoraproject.org/pipermail/package-announce/2014-February/128205.html
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/102822
• af854a3a-2127-422b-91ae-364da2661108http://seclists.org/oss-sec/2014/q1/221
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/65341
• af854a3a-2127-422b-91ae-364da2661108https://github.com/mrash/fwsnort/blob/master/ChangeLog
• af854a3a-2127-422b-91ae-364da2661108https://github.com/mrash/fwsnort/commit/fa977453120cc48e1654f373311f9cac468d3348