Unscored severity · published Aug 6, 2004
CVE-2004-0647
shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file
–
CVSS
0.3%
EPSS
No
On KEV
Description
shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SH
Shorewall · Shorewall
1.4; 1.4.1; 1.4.2; 1.4.3; 1.4.3a; 1.4.4; +10 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0647
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0647
lists.shorewall.net
http://lists.shorewall.net/pipermail/shorewall-announce/2004-June/000385.html
Patch
http://www.gentoo.org/security/en/glsa/glsa-200407-07.xml
www.mandrakesecure.net
http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:080
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/16651
More from Shorewall
–
CVE-2005-2317
Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than 0 or MACLIST_DISPOSITION is set to ACCEPT, allows remote attackers with…