ByteOS Network

NVD Vulnerability Details :

CVE-2009-4664

Deferred

Source-cve@mitre.org

Published At-03 Mar, 2010 | 20:30

Updated At-11 Apr, 2025 | 00:51

Firewall Builder 3.0.4, 3.0.5, and 3.0.6, when running on Linux, allows local users to gain privileges via a symlink attack on an unspecified temporary file that is created by the iptables script.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	3.3	LOW	AV:L/AC:M/Au:N/C:N/I:P/A:P

CPE Matches

fwbuilder>>firewall_builder>>3.0.4

cpe:2.3:a:fwbuilder:firewall_builder:3.0.4:*:*:*:*:*:*:*

fwbuilder>>firewall_builder>>3.0.5

cpe:2.3:a:fwbuilder:firewall_builder:3.0.5:*:*:*:*:*:*:*

fwbuilder>>firewall_builder>>3.0.6

cpe:2.3:a:fwbuilder:firewall_builder:3.0.6:*:*:*:*:*:*:*

Linux Kernel Organization, Inc

>>linux_kernel>>*

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-59	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://blog.fwbuilder.org/2009/09/firewall-builder-v307-released.html	cve@mitre.org	Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035112.html	cve@mitre.org	N/A
http://osvdb.org/58247	cve@mitre.org	N/A
http://secunia.com/advisories/36809	cve@mitre.org	Vendor Advisory
http://www.fwbuilder.org/docs/firewall_builder_release_notes.html#3.0.7	cve@mitre.org	N/A
http://www.securityfocus.com/bid/36468	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2010/0389	cve@mitre.org	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=524588	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/53392	cve@mitre.org	N/A
http://blog.fwbuilder.org/2009/09/firewall-builder-v307-released.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035112.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://osvdb.org/58247	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/36809	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.fwbuilder.org/docs/firewall_builder_release_notes.html#3.0.7	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/36468	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2010/0389	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugzilla.redhat.com/show_bug.cgi?id=524588	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/53392	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History