CVE-2014-3982

Name of the Vulnerable Software and Affected Versions Lynis version 1.5.4 and earlier

Description The issue allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.##### file in the include/tests webservers component of Lynis.

Recommendations For versions prior to 1.5.5, consider updating to version 1.5.5 or later to resolve the issue. As a temporary workaround, restrict access to the /tmp directory to minimize the risk of exploitation.