Debian Debmake Local Insecure Temporary File Creation Vulnerability
BID:12078
Info
Debian Debmake Local Insecure Temporary File Creation Vulnerability
| Bugtraq ID: | 12078 |
| Class: | Design Error |
| CVE: |
CVE-2004-1179 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 22 2004 12:00AM |
| Updated: | Jul 12 2009 09:26AM |
| Credit: | Javier Fernández-Sanguino Peña is credited with the discovery of this issue. |
| Vulnerable: |
Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia-64 Debian Linux 3.0 ia-32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 Debian debmake 3.6.9 |
| Not Vulnerable: |
Debian debmake 3.6.10 |
Discussion
Debian Debmake Local Insecure Temporary File Creation Vulnerability
A local insecure file creation vulnerability affects Debian's debmake. This issue is due to a design error that causes the affected application to create temporary files insecurely.
An attacker may leverage this issue to corrupt arbitrary files with the privileges of the user that activates the affected application.
A local insecure file creation vulnerability affects Debian's debmake. This issue is due to a design error that causes the affected application to create temporary files insecurely.
An attacker may leverage this issue to corrupt arbitrary files with the privileges of the user that activates the affected application.
Exploit / POC
Debian Debmake Local Insecure Temporary File Creation Vulnerability
No exploit is required to leverage this issue.
No exploit is required to leverage this issue.
Solution / Fix
Debian Debmake Local Insecure Temporary File Creation Vulnerability
Solution:
Debian has released an advisory (DSA 615-1) and an upgrade dealing with this issue. Please see the referenced advisory for more information.
Ubuntu has released an advisory (USN-49-1) dealing with this issue. Please see the referenced advisory for more information.
Debian debmake 3.6.9
Ubuntu Ubuntu Linux 4.1 ia32
Ubuntu Ubuntu Linux 4.1 ia64
Ubuntu Ubuntu Linux 4.1 ppc
Solution:
Debian has released an advisory (DSA 615-1) and an upgrade dealing with this issue. Please see the referenced advisory for more information.
Ubuntu has released an advisory (USN-49-1) dealing with this issue. Please see the referenced advisory for more information.
Debian debmake 3.6.9
-
Debian debmake_3.6.10.woody.1.dsc
http://security.debian.org/pool/updates/main/d/debmake/debmake_3.6.10. woody.1.dsc -
Debian debmake_3.6.10.woody.1.tar.gz
http://security.debian.org/pool/updates/main/d/debmake/debmake_3.6.10. woody.1.tar.gz -
Debian debmake_3.6.10.woody.1_all.deb
http://security.debian.org/pool/updates/main/d/debmake/debmake_3.6.10. woody.1_all.deb
Ubuntu Ubuntu Linux 4.1 ia32
-
Ubuntu debmake_3.7.4ubuntu0.1_all.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/d/debmake/debmake_3.7.4ubu ntu0.1_all.deb
Ubuntu Ubuntu Linux 4.1 ia64
-
Ubuntu debmake_3.7.4ubuntu0.1_all.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/d/debmake/debmake_3.7.4ubu ntu0.1_all.deb
Ubuntu Ubuntu Linux 4.1 ppc
-
Ubuntu debmake_3.7.4ubuntu0.1_all.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/d/debmake/debmake_3.7.4ubu ntu0.1_all.deb
References
Debian Debmake Local Insecure Temporary File Creation Vulnerability
References:
References: