CVE Vulnerabilities

CVE-2014-0039

Published: Feb 08, 2014 | Modified: Feb 21, 2014
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.4 MEDIUM
AV:L/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Untrusted search path vulnerability in fwsnort before 1.6.4, when not running as root, allows local users to execute arbitrary code via a Trojan horse fwsnort.conf in the current working directory.

Affected Software

Name Vendor Start Version End Version
Fwsnort Cipherdyne * 1.6.4 (including)
Fwsnort Cipherdyne 0.5 (including) 0.5 (including)
Fwsnort Cipherdyne 0.6 (including) 0.6 (including)
Fwsnort Cipherdyne 0.6.1 (including) 0.6.1 (including)
Fwsnort Cipherdyne 0.6.2 (including) 0.6.2 (including)
Fwsnort Cipherdyne 0.6.3 (including) 0.6.3 (including)
Fwsnort Cipherdyne 0.6.4 (including) 0.6.4 (including)
Fwsnort Cipherdyne 0.6.5 (including) 0.6.5 (including)
Fwsnort Cipherdyne 0.7.0 (including) 0.7.0 (including)
Fwsnort Cipherdyne 0.8.0 (including) 0.8.0 (including)
Fwsnort Cipherdyne 0.8.1 (including) 0.8.1 (including)
Fwsnort Cipherdyne 0.8.2 (including) 0.8.2 (including)
Fwsnort Cipherdyne 0.9.0 (including) 0.9.0 (including)
Fwsnort Cipherdyne 1.0 (including) 1.0 (including)
Fwsnort Cipherdyne 1.0.1 (including) 1.0.1 (including)
Fwsnort Cipherdyne 1.0.2 (including) 1.0.2 (including)
Fwsnort Cipherdyne 1.0.3 (including) 1.0.3 (including)
Fwsnort Cipherdyne 1.0.4 (including) 1.0.4 (including)
Fwsnort Cipherdyne 1.0.5 (including) 1.0.5 (including)
Fwsnort Cipherdyne 1.0.6 (including) 1.0.6 (including)
Fwsnort Cipherdyne 1.5 (including) 1.5 (including)
Fwsnort Cipherdyne 1.6 (including) 1.6 (including)
Fwsnort Cipherdyne 1.6.1 (including) 1.6.1 (including)
Fwsnort Cipherdyne 1.6.2 (including) 1.6.2 (including)
Fwsnort Cipherdyne 1.6.3 (including) 1.6.3 (including)
Fwsnort Ubuntu artful *
Fwsnort Ubuntu lucid *
Fwsnort Ubuntu precise *
Fwsnort Ubuntu quantal *
Fwsnort Ubuntu saucy *
Fwsnort Ubuntu trusty *
Fwsnort Ubuntu utopic *
Fwsnort Ubuntu vivid *
Fwsnort Ubuntu wily *
Fwsnort Ubuntu yakkety *
Fwsnort Ubuntu zesty *

References