NVD

Id
28987  
Name
CVE-2014-0039  
Description
Untrusted search path vulnerability in fwsnort before 1.6.4, when not running as root, allows local users to execute arbitrary code via a Trojan horse fwsnort.conf in the current working directory.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-02-07  
Modified Date
2014-02-21  
Seq
2014-0039  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
152845 28987 CVE-2014-0039 FEDORA-2014-1975  View
152846 28987 CVE-2014-0039 FEDORA-2014-1972  View
152847 28987 CVE-2014-0039 [oss-security] 20140203 CVE-2014-0039: fwsnort loaded configuration file from cwd when run as a non-root user  View
152848 28987 CVE-2014-0039 65341  View
152849 28987 CVE-2014-0039 https://github.com/mrash/fwsnort/blob/master/ChangeLog  View
152850 28987 CVE-2014-0039 https://github.com/mrash/fwsnort/commit/fa977453120cc48e1654f373311f9cac468d3348  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12476 JVNDB-2014-001351 fwsnort における任意のコードを実行される脆弱性 fwsnort には、root として実行していない場合、検索パスに関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2014-0039 67440 CVE-2014-0039 28987 4.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001351.html 2014-02-01 2014-02-12 View