SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passwords for the alert database servers.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Snortcenter | Snortcenter | 0.9.5 (including) | 0.9.5 (including) |