Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report.
Max CVSS
7.2
EPSS Score
59.32%
Published
2004-08-06
Updated
2017-07-11
Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbolic link attack on temporary files.
Max CVSS
4.6
EPSS Score
0.04%
Published
2001-10-18
Updated
2017-10-10
2 vulnerabilities found