admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2008/CVE-2008-4953.md
0xMarcio 9dd9a4d134 Update CVE sources 2024-08-07 19:02
2024-08-07 19:02:05 +00:00

808 B
Raw Blame History

CVE-2008-4953

Description

** DISPUTED ** firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/.firehol-tmp-#####-- and (2) /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create 1073741824*PID-RANGE symlinks."

POC

Reference

Github