Back to feed
EUVD-2008-4932 · Published Nov 5, 2008
firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/.firehol-tmp-#####-*-* and (2) /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create 1073741824*PID-RANGE symlinks.
Technologies
Firehol Firehol
Weaknesses
CWE-59
CVSS scores
- v2.06.9
AV:L/AC:M/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Execution Persistence Privilege Escalation Stealth
References
Potentially impacted assets
See if this affects your attack surface
