NVD

Id
55000  
Name
CVE-2007-2837  
Description
The (1) getRule and (2) getChains functions in server/rules.cpp in fireflierd (fireflier-server) in FireFlier 1.1.6 allow local users to overwrite arbitrary files via a symlink attack on the /tmp/fireflier.rules temporary file.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-07-03  
Modified Date
2008-11-15  
Seq
2007-2837  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
279279 55000 CVE-2007-2837 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=431332  View
279280 55000 CVE-2007-2837 DSA-1326  View
279281 55000 CVE-2007-2837 24718  View
279282 55000 CVE-2007-2837 fireflier-getchains-symlink(35226)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53377 JVNDB-2007-002069 FireFlier の fireflier-server における任意のファイルを上書きされる脆弱性 FireFlier の fireflierd (fireflier-server) の server/rules.cpp の (1) getRule 関数および (2) getChains 関数には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2007-2837 26192 CVE-2007-2837 55000 3.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002069.html 2007-07-01 2012-06-26 View