CVE-2014-5284

CVE-2014-5284 describes a local privilege escalation vulnerability in OSSEC versions prior to 2.8.1. The host-deny.sh script insecurely creates temporary files with predictable names, allowing a local attacker to pre-create these files and manipulate access restrictions in hosts.deny, ultimately gaining root privileges. This vulnerability has a CVSS score of 7.2, indicating high severity with complete confidentiality, integrity, and availability impacts, and requires local access. While not actively exploited in the wild, public exploit code exists, and it has received minimal community discussion or media coverage.