CVE-2004-0647

MEDIUM 4.6CVE-2004-0647 · Published 06/08/2004 · updated 16/06/2026

In short

CVE-2004-0647 is a MEDIUM (CVSS 4.6) vulnerability affecting shorewall (shorewall).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
shorewall shorewall	`= 1.4= 1.4.1= 1.4.10= 1.4.2= 1.4.3= 1.4.3a= 1.4.4= 1.4.5= 1.4.6= 1.4.7= 1.4.8= 1.4.9= 2.0= 2.0.1= 2.0.2= 2.0.3`	No fix yet

Description

shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file.

References

lists.shorewall.net/pipermail/shorewall-announce/2004-June/000385.html
gentoo.org/security/en/glsa/glsa-200407-07.xml · Patch
mandrakesecure.net/en/advisories/advisory.php
exchange.xforce.ibmcloud.com/vulnerabilities/16651

More vulnerabilities in shorewall

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free