CVE-2014-0039

Medium

4.4/10

Summary

Untrusted search path vulnerability in fwsnort before 1.6.4, when not running as root, allows local users to execute arbitrary code via a Trojan horse fwsnort.conf in the current working directory.

Access Complexity: MEDIUM
AccessVector: LOCAL
Authentication: NONE
Integrity Impact: PARTIAL
Confidentiality Impact: PARTIAL
Availability Impact: PARTIAL

References

Advisory Timeline

Published Feb 08, 2014

CVE-2014-0039

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS