CVE-2009-4664: Firewall Builder 3.0.4, 3.0.5, and 3.0.6, when running on Linux, allows local users to gain privileges via...

Security readout for executives and security teams

This is an old Linux-only Firewall Builder issue where versions 3.0.4 through 3.0.6 could let a local user gain higher privileges through unsafe temporary-file handling in an iptables script. It is not a remote internet-facing flaw, but it matters on systems where untrusted or lower-privileged users can log in. Exposure is likely limited to legacy Linux systems running Firewall Builder 3.0.4, 3.0.5, or 3.0.6, especially where local shell users or shared administrative accounts exist. Modern environments are unlikely to be affected unless old packages remain installed. Treat this as a legacy hygiene issue unless affected versions are found on multi-user Linux systems. If present, prioritize upgrade or removal because the impact is privilege gain, even though exploitation requires local access. Mitigation focus: Upgrade Firewall Builder to 3.0.7 or a currently supported replacement.; Remove Firewall Builder from systems where it is no longer required.; Restrict local shell access on affected Linux hosts..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.