Zero G InstallAnywhere Insecure Temporary File Creation Vulnerability

Bugtraq ID:	10808
Class:	Race Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 26 2004 12:00AM
Updated:	Jul 26 2004 12:00AM
Credit:	Larry Cashdollar disclosed this vulnerability.
Vulnerable:	Zero G InstallAnywhere 5.0.7 Zero G InstallAnywhere 5.0.6
Not Vulnerable:	Zero G InstallAnywhere 6.1

Zero G InstallAnywhere Insecure Temporary File Creation Vulnerability

It is reported that InstallAnywhere is prone to a local insecure temporary file handling symbolic link vulnerability. This issue is due to an error that allows the application to insecurely create a file with a predictable name in the '/tmp' directory.

A successful attack can eventually allow a local attacker to gain super user privileges.

Versions 5.0.6 and 5.0.7 are reported vulnerable. Other versions may also be affected by this issue.

Zero G InstallAnywhere Insecure Temporary File Creation Vulnerability

No exploit is required.

Zero G InstallAnywhere Insecure Temporary File Creation Vulnerability

Solution:
It has been reported that the latest version of InstallAnywhere is not susceptible to this vulnerability.

Zero G InstallAnywhere Insecure Temporary File Creation Vulnerability

References:

• InstallAnywhere Home Page (Zero G)
  
• ZeroG InstallAnywhere5 Symlink Vulnerability (iDEFENSE)