CVE-2014-0039

Published: Feb 8, 2014Modified: Apr 29, 2026

4.4

Vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 3.4 / Impact: 6.4

Source: NVD

Description

Untrusted search path vulnerability in fwsnort before 1.6.4, when not running as root, allows local users to execute arbitrary code via a Trojan horse fwsnort.conf in the current working directory.

Affected (25)

Products: Cipherdyne: Fwsnort

Cipherdyne

1 product

Fwsnort

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Cipherdyne Fwsnort	Up to 1.6.4
Cipherdyne Fwsnort	Version 0.5
Cipherdyne Fwsnort	Version 0.6.1
Cipherdyne Fwsnort	Version 0.6.2
Cipherdyne Fwsnort	Version 0.6.3
Cipherdyne Fwsnort	Version 0.6.4
Cipherdyne Fwsnort	Version 0.6.5
Cipherdyne Fwsnort	Version 0.6
Cipherdyne Fwsnort	Version 0.7.0
Cipherdyne Fwsnort	Version 0.8.0
Cipherdyne Fwsnort	Version 0.8.1
Cipherdyne Fwsnort	Version 0.8.2
Cipherdyne Fwsnort	Version 0.9.0
Cipherdyne Fwsnort	Version 1.0.1
Cipherdyne Fwsnort	Version 1.0.2
Cipherdyne Fwsnort	Version 1.0.3
Cipherdyne Fwsnort	Version 1.0.4
Cipherdyne Fwsnort	Version 1.0.5
Cipherdyne Fwsnort	Version 1.0.6
Cipherdyne Fwsnort	Version 1.0
Cipherdyne Fwsnort	Version 1.5
Cipherdyne Fwsnort	Version 1.6.1
Cipherdyne Fwsnort	Version 1.6.2
Cipherdyne Fwsnort	Version 1.6.3
Cipherdyne Fwsnort	Version 1.6