{"id":"CVE-2014-3986","details":"include/tests_webservers in Lynis before 1.5.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.*.unsorted file with an easily determined name.","modified":"2026-04-10T03:43:51.600196Z","published":"2014-06-08T18:55:06Z","references":[{"type":"WEB","url":"http://cisofy.com/files/lynis-1.5.5.tar.gz"},{"type":"WEB","url":"http://openwall.com/lists/oss-security/2014/06/05/14"},{"type":"WEB","url":"http://openwall.com/lists/oss-security/2014/06/06/12"},{"type":"WEB","url":"http://openwall.com/lists/oss-security/2014/06/07/3"},{"type":"WEB","url":"http://seclists.org/fulldisclosure/2014/Jun/21"}],"schema_version":"1.7.5"}