CVE-2014-5284: High severity ossec vulnerability
host-deny.sh in OSSEC before 2.8.1 writes to temporary files with predictable filenames without verifying ownership, which allows local users to modify access restrictions in hosts.deny and gain root privileges by creating the temporary files before automatic IP blocking is performed.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-5284?
CVE-2014-5284 has a high severity rating due to the potential for local users to gain root privileges.
How do I fix CVE-2014-5284?
To fix CVE-2014-5284, upgrade OSSEC to version 2.8.1 or later.
What versions of OSSEC are affected by CVE-2014-5284?
CVE-2014-5284 affects all OSSEC versions before 2.8.1.
What are the potential impacts of CVE-2014-5284?
The primary impact of CVE-2014-5284 is that it allows local users to modify access restrictions and gain root access.
What is the nature of the vulnerability in CVE-2014-5284?
CVE-2014-5284 is a privilege escalation vulnerability caused by predictable temporary filenames and improper ownership verification.