Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo: GLSA 202310-02 High: OpenSSL Security Vulnerability Found

gentoo
Calendar Grey February 1, 2005
Scroller Gentoo
Gentoo advisory GLSA 202305-02 highlights vulnerability in FireHOL, enabling unauthorized local file modifications.
FireHOL is vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files.

Summary

Gentoo Linux Security Advisory GLSA 200502-01 https://security.gentoo.org/ Severity: Normal Title: FireHOL: Insecure temporary file creation Date: February 01, 2005 Bugs: #79330 ID: 200502-01

Synopsis ======= FireHOL is vulnerable to symlink attacks, potentially allowing a local user to overwrite arbitrary files.
Background ========= FireHOL is an iptables rules generator.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-firewall/firehol < 1.224 >= 1.224
========== FireHOL insecurely creates temporary files with predictable names.
Impact ===== A local attacker could create malicious symbolic links to arbitrary system files. When FireHOL is executed...

Read the Full Advisory

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround