CVE:CVE-2014-0039
CNNVD:CNNVD-201402-093
fwsnort是美国软件开发者Michael Rash所研发的一套能够将Snort规则转换为等价的iptables规则的脚本。
fwsnort 1.6.4之前的版本中存在不可信搜索路径漏洞。当以非root权限运行时，本地攻击者可通过当前工作目录下的Trojan horse fwsnort.conf文件利用该漏洞执行任意代码。
solution:Upgrade cipherdyne fwsnort to a higher version than 1.6.4,0.5,0.6,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.7.0,0.8.0,0.8.1,0.8.2,0.9.0,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.5,1.6,1.6.1,1.6.2,1.6.3,and avoid the version (,1.6.4],0.5,0.6,0.6.1,0.6.2,0.6.3,0.6.4,0.6.5,0.7.0,0.8.0,0.8.1,0.8.2,0.9.0,1.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.5,1.6,1.6.1,1.6.2,1.6.3