CVEvulnerability
CVE-2005-0225
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2005-05-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Description
firehol.sh in FireHOL before 1.224 creates temporary files with predictable file names, which could allow local users to overwrite arbitrary files via a symlink attack.
Affected configurations
• firehol firehol 1.1
• firehol firehol 1.1.1.1
• firehol firehol 1.2
• firehol firehol 1.3
• firehol firehol 1.4
• firehol firehol 1.5
• firehol firehol 1.6
• firehol firehol 1.7
• firehol firehol 1.8
• firehol firehol 1.9
• firehol firehol 1.10
• firehol firehol 1.11
• firehol firehol 1.12
• firehol firehol 1.13
• firehol firehol 1.14
• firehol firehol 1.15
• firehol firehol 1.16
• firehol firehol 1.17
• firehol firehol 1.18
• firehol firehol 1.19
• firehol firehol 1.20
• firehol firehol 1.21
• firehol firehol 1.22
• firehol firehol 1.23
• firehol firehol 1.24
• firehol firehol 1.25
• firehol firehol 1.26
• firehol firehol 1.27
• firehol firehol 1.28
• firehol firehol 1.29
• firehol firehol 1.30
• firehol firehol 1.31
• firehol firehol 1.32
• firehol firehol 1.33
• firehol firehol 1.34
• firehol firehol 1.35
• firehol firehol 1.36
• firehol firehol 1.37
• firehol firehol 1.38
• firehol firehol 1.39
• firehol firehol 1.40
• firehol firehol 1.41
• firehol firehol 1.42
• firehol firehol 1.43
• firehol firehol 1.44
• firehol firehol 1.45
• firehol firehol 1.46
• firehol firehol 1.47
• firehol firehol 1.48
• firehol firehol 1.49
• firehol firehol 1.50
• firehol firehol 1.51
• firehol firehol 1.52
• firehol firehol 1.53
• firehol firehol 1.54
• firehol firehol 1.55
• firehol firehol 1.56
• firehol firehol 1.57
• firehol firehol 1.58
• firehol firehol 1.59
… and 165 more
References
- http://cvs.sourceforge.net/viewcvs.py/firehol/firehol/firehol.sh cvs.sourceforge.net
- http://secunia.com/advisories/13970 secunia.com
- http://secunia.com/advisories/14102 secunia.com
- http://securitytracker.com/id?1012969 securitytracker.com
- http://www.gentoo.org/security/en/glsa/glsa-200502-01.xml www.gentoo.org
- http://www.osvdb.org/13137 www.osvdb.org
- http://www.securityfocus.com/bid/12336 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19032 exchange.xforce.ibmcloud.com
- http://cvs.sourceforge.net/viewcvs.py/firehol/firehol/firehol.sh cvs.sourceforge.net
- http://secunia.com/advisories/13970 secunia.com
- http://secunia.com/advisories/14102 secunia.com
- http://securitytracker.com/id?1012969 securitytracker.com
- http://www.gentoo.org/security/en/glsa/glsa-200502-01.xml www.gentoo.org
- http://www.osvdb.org/13137 www.osvdb.org
- http://www.securityfocus.com/bid/12336 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19032 exchange.xforce.ibmcloud.com