CVE-2015-8326

Published: Jun 7, 2017Modified: May 13, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user.

Affected (13)

Products: Iptables Parse Project: Iptables Parse Module

Iptables Parse Project

1 product

Iptables Parse Module

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Iptables Parse Project Iptables Parse Module	Version 0.5
Iptables Parse Project Iptables Parse Module	Version 0.6
Iptables Parse Project Iptables Parse Module	Version 0.7
Iptables Parse Project Iptables Parse Module	Version 0.8
Iptables Parse Project Iptables Parse Module	Version 0.9
Iptables Parse Project Iptables Parse Module	Version 1.0
Iptables Parse Project Iptables Parse Module	Version 1.1
Iptables Parse Project Iptables Parse Module	Version 1.3.1
Iptables Parse Project Iptables Parse Module	Version 1.3
Iptables Parse Project Iptables Parse Module	Version 1.4
Iptables Parse Project Iptables Parse Module	Version 1.5
Iptables Parse Project Iptables Parse Module	Version 1.6.1
Iptables Parse Project Iptables Parse Module	Version 1.6

Related CWEs

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (8)

http://www.openwall.com/lists/oss-security/2015/11/24/10

Source: security@debian.org

Mailing ListPatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1267962

Source: security@debian.org

Issue TrackingThird Party Advisory

https://github.com/mtrmac/IPTables-Parse/commit/b400b976d81140f6971132e94eb7657b5b0a2b87

Source: security@debian.org

Issue TrackingPatchThird Party Advisory

https://metacpan.org/source/MRASH/IPTables-Parse-1.6/Changes

Source: security@debian.org

Release NotesThird Party Advisory

http://www.openwall.com/lists/oss-security/2015/11/24/10

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1267962

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://github.com/mtrmac/IPTables-Parse/commit/b400b976d81140f6971132e94eb7657b5b0a2b87

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://metacpan.org/source/MRASH/IPTables-Parse-1.6/Changes

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

Timeline

No history available yet.