CVE-2004-0647

Published: Aug 6, 2004Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file.

Affected (16)

Products: Shorewall: Shorewall

Shorewall

1 product

Shorewall

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Shorewall Shorewall	Version 1.4.10
Shorewall Shorewall	Version 1.4.1
Shorewall Shorewall	Version 1.4.2
Shorewall Shorewall	Version 1.4.3
Shorewall Shorewall	Version 1.4.3a
Shorewall Shorewall	Version 1.4.4
Shorewall Shorewall	Version 1.4.5
Shorewall Shorewall	Version 1.4.6
Shorewall Shorewall	Version 1.4.7
Shorewall Shorewall	Version 1.4.8
Shorewall Shorewall	Version 1.4.9
Shorewall Shorewall	Version 1.4
Shorewall Shorewall	Version 2.0.1
Shorewall Shorewall	Version 2.0.2
Shorewall Shorewall	Version 2.0.3
Shorewall Shorewall	Version 2.0