← Back

Firehol

firehol

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Firehol
firehol

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Firehol
1Firehol
Apr 23, 2026
Nov 5, 2008
N/A· v4
N/A· v3
6.9 MEDIUM· v2
firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/.firehol-tmp-#####-*-* and (2) /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, s...Show more
firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/.firehol-tmp-#####-*-* and (2) /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create 1073741824*PID-RANGE symlinks.Show less
1Firehol
1Firehol
Apr 16, 2026
May 2, 2005
N/A· v4
N/A· v3
2.1 LOW· v2
firehol.sh in FireHOL before 1.224 creates temporary files with predictable file names, which could allow local users to overwrite arbitrary files via a symlink attack.