Vulnerability-Lookup

FKIE_CVE-2004-0647

Vulnerability from fkie_nvd - Published: 2004-08-06 04:00 - Updated: 2025-04-03 01:03

Severity ?

Summary

shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file.

References

URL	Tags
cve@mitre.org	http://lists.shorewall.net/pipermail/shorewall-announce/2004-June/000385.html
cve@mitre.org	http://www.gentoo.org/security/en/glsa/glsa-200407-07.xml	Patch, Vendor Advisory
cve@mitre.org	http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:080
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/16651
af854a3a-2127-422b-91ae-364da2661108	http://lists.shorewall.net/pipermail/shorewall-announce/2004-June/000385.html
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200407-07.xml	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:080
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/16651

Impacted products

Vendor	Product	Version
shorewall	shorewall	1.4
shorewall	shorewall	1.4.1
shorewall	shorewall	1.4.2
shorewall	shorewall	1.4.3
shorewall	shorewall	1.4.3a
shorewall	shorewall	1.4.4
shorewall	shorewall	1.4.5
shorewall	shorewall	1.4.6
shorewall	shorewall	1.4.7
shorewall	shorewall	1.4.8
shorewall	shorewall	1.4.9
shorewall	shorewall	1.4.10
shorewall	shorewall	2.0
shorewall	shorewall	2.0.1
shorewall	shorewall	2.0.2
shorewall	shorewall	2.0.3

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "B09DE7E2-CC5F-415B-A392-D68AB5D5183A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:1.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9607C7E-6F86-4912-A376-08AF7BF02C1D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:1.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "36381169-72B8-4A24-BAF2-BEC34ED111CE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:1.4.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB8C6C0C-AFFD-4245-9BC8-315449A93630",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:1.4.3a:*:*:*:*:*:*:*",
              "matchCriteriaId": "755E1346-339F-4910-A360-A54A7C7248CC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:1.4.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "5484FDC1-69C9-4E41-AC5C-9F27AAAA21F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:1.4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "27002D31-C070-438D-B673-883E53604484",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:1.4.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "51856967-B4E8-492F-9A7D-ABEDA30DD002",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:1.4.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "C908BE61-EC82-4FFA-9F70-A62DCB61B7E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:1.4.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5D91047-9FFE-434F-AA74-8CAD5FFA1D47",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:1.4.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "F8AAC279-B154-4591-90C8-4026DFE486EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:1.4.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6FC0B9A-1B52-4983-A8DB-A27EDB16C399",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA74BD87-28A4-479B-A02C-C5EF0FE99033",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA3C10C9-AB0C-4CDB-82C2-606FC92799E3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:2.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "444C2974-82B2-49D9-B6D2-6E6BB19A100B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:shorewall:shorewall:2.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF76A1B4-3B30-408B-9E8D-627BA55B44B7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file."
    },
    {
      "lang": "es",
      "value": "shorewall 1.4.10c y anteriores, y 2.0.x anteriores a 2.0.3a permiten a usuarios locales sobreescribir ficheros de su elecci\u00f3n mediante un ataque de enlaces simb\u00f3licos en el fichero temporal chain-$$."
    }
  ],
  "id": "CVE-2004-0647",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": true,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2004-08-06T04:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://lists.shorewall.net/pipermail/shorewall-announce/2004-June/000385.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200407-07.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:080"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16651"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.shorewall.net/pipermail/shorewall-announce/2004-June/000385.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200407-07.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:080"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16651"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2004-0647 (GCVE-0-2004-0647)

Vulnerability from cvelistv5 – Published: 2004-07-13 04:00 – Updated: 2024-08-08 00:24

Summary

shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file.

Severity ?

No CVSS data available.

CWE

Assigner

mitre

References

URL

Tags

	https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
	http://lists.shorewall.net/pipermail/shorewall-an…	mailing-listx_refsource_MLIST
	http://www.mandrakesecure.net/en/advisories/advis…	vendor-advisoryx_refsource_MANDRAKE
	http://www.gentoo.org/security/en/glsa/glsa-20040…	vendor-advisoryx_refsource_GENTOO

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T00:24:27.055Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "shorewall-symlink(16651)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16651"
          },
          {
            "name": "[Shorewall-announce] 20040628 URGENT: Shorewall Security Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.shorewall.net/pipermail/shorewall-announce/2004-June/000385.html"
          },
          {
            "name": "MDKSA-2004:080",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRAKE",
              "x_transferred"
            ],
            "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:080"
          },
          {
            "name": "GLSA-200407-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200407-07.xml"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-06-28T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-10T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "shorewall-symlink(16651)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16651"
        },
        {
          "name": "[Shorewall-announce] 20040628 URGENT: Shorewall Security Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.shorewall.net/pipermail/shorewall-announce/2004-June/000385.html"
        },
        {
          "name": "MDKSA-2004:080",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRAKE"
          ],
          "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:080"
        },
        {
          "name": "GLSA-200407-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200407-07.xml"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-0647",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "shorewall-symlink(16651)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16651"
            },
            {
              "name": "[Shorewall-announce] 20040628 URGENT: Shorewall Security Vulnerability",
              "refsource": "MLIST",
              "url": "http://lists.shorewall.net/pipermail/shorewall-announce/2004-June/000385.html"
            },
            {
              "name": "MDKSA-2004:080",
              "refsource": "MANDRAKE",
              "url": "http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:080"
            },
            {
              "name": "GLSA-200407-07",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200407-07.xml"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-0647",
    "datePublished": "2004-07-13T04:00:00",
    "dateReserved": "2004-07-09T00:00:00",
    "dateUpdated": "2024-08-08T00:24:27.055Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

FKIE_CVE-2004-0647

CVE-2004-0647 (GCVE-0-2004-0647)

Tags

Sightings

Nomenclature