Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passwords for the alert database servers.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SnortCenter不安全Sensor配置文件权限漏洞
Vulnerability Description
SnortCenter是一款由PHP编写的基于WEB的SNORT管理系统。 SnortCenter建立临时sensor配置文件时设置权限不正确，本地攻击者可以利用这个漏洞获得报警数据库用户名和口令信息。 SnortCenter建立临时的sensor配置文件名称与sensor相同，如sensor命令为"hal"，并把报警规则'推'入库中时，会在临时目录中建立/tmp/hal配置文件，并且设置的权限为777，因此任何本地用户可以查看，而且这个文件包含报警数据库的用户名和口令，攻击者如果获得这些信息，可以对报警
CVSS Information
N/A
Vulnerability Type
N/A