CVE-2014-0039 in fwsnort

Summary

Untrusted search path vulnerability in fwsnort before 1.6.4, when not running as root, allows local users to execute arbitrary code via a Trojan horse fwsnort.conf in the current working directory.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 12/03/2013
• Disclosure: 02/07/2014
• Moderation: VulDB entry created
• Entries: VDB-66348 (1)
• CPE: ready
• CWE: CWE-426 (Confirmed)
• CVSS: 5.9
• EPSS: 0.00088
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2014-0039
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2014-0039
• CVE Details: https://www.cvedetails.com/cve/CVE-2014-0039/