CVE-2009-5023 | BDVDB-2026-62053 Detail

Description#

The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf actions in action.d/ in Fail2ban before 0.8.5 allows local users to write to arbitrary files via a symlink attack on temporary files with predictable names, as demonstrated by /tmp/fail2ban-mail.txt.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/fail2ban/fail2ban/blob/sdist/0.8.5/ChangeLog
http://security.gentoo.org/glsa/glsa-201406-03.xml
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=544232
http://secunia.com/advisories/58841

Exploit#

No public exploit known

History#

Version 12014-06-10Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.