CVEvulnerability
CVE-2014-3986
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2014-06-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:L/AC:M/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-59
Description
include/tests_webservers in Lynis before 1.5.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.*.unsorted file with an easily determined name.
Affected configurations
• cisofy lynis (<= 1.5.4)
• cisofy lynis 1.5.0
• cisofy lynis 1.5.1
• cisofy lynis 1.5.2
• cisofy lynis 1.5.3
Related
Weakness · CWE (1)
- CWE-59 Improper Link Resolution Before File Access weakness
References
- http://cisofy.com/files/lynis-1.5.5.tar.gz cisofy.com
- http://openwall.com/lists/oss-security/2014/06/05/14 openwall.com
- http://openwall.com/lists/oss-security/2014/06/06/12 openwall.com
- http://openwall.com/lists/oss-security/2014/06/07/3 openwall.com
- http://seclists.org/fulldisclosure/2014/Jun/21 seclists.org
- http://cisofy.com/files/lynis-1.5.5.tar.gz cisofy.com
- http://openwall.com/lists/oss-security/2014/06/05/14 openwall.com
- http://openwall.com/lists/oss-security/2014/06/06/12 openwall.com
- http://openwall.com/lists/oss-security/2014/06/07/3 openwall.com
- http://seclists.org/fulldisclosure/2014/Jun/21 seclists.org