Sudo VISudo Insecure Temporary File Creation Vulnerability
BID:13171
Info
Sudo VISudo Insecure Temporary File Creation Vulnerability
| Bugtraq ID: | 13171 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 14 2005 12:00AM |
| Updated: | Apr 14 2005 12:00AM |
| Credit: | Discovery of this issue is credited to Imran Ghory <[email protected]>. |
| Vulnerable: |
Todd Miller Sudo 1.6.8 p8 Todd Miller Sudo 1.6.8 p1 Todd Miller Sudo 1.6.8 Todd Miller Sudo 1.6.7 p5 Todd Miller Sudo 1.6.7 Todd Miller Sudo 1.6.6 Todd Miller Sudo 1.6.5 p2 Todd Miller Sudo 1.6.5 p1 Todd Miller Sudo 1.6.5 Todd Miller Sudo 1.6.4 p2 Todd Miller Sudo 1.6.4 p1 Todd Miller Sudo 1.6.4 Todd Miller Sudo 1.6.3 p7 Todd Miller Sudo 1.6.3 p6 Todd Miller Sudo 1.6.3 p5 Todd Miller Sudo 1.6.3 p4 Todd Miller Sudo 1.6.3 p3 Todd Miller Sudo 1.6.3 p2 Todd Miller Sudo 1.6.3 p1 Todd Miller Sudo 1.6.3 Todd Miller Sudo 1.6.2 Todd Miller Sudo 1.6.1 Todd Miller Sudo 1.6 Todd Miller Sudo 1.5.9 Todd Miller Sudo 1.5.8 Todd Miller Sudo 1.5.7 Todd Miller Sudo 1.5.6 |
| Not Vulnerable: | |
Discussion
Sudo VISudo Insecure Temporary File Creation Vulnerability
visudo is prone to an insecure temporary file creation vulnerability. However, the issue can only manifest if the software is invoked on a sudoers file that is contained in a world writable directory.
The visudo application creates a temporary file in the same directory as the sudoers file that is being edited. The temporary file is named using a easily predictable filename.
An attacker may exploit this vulnerability to corrupt arbitrary files with privileges of the superuser.
visudo is prone to an insecure temporary file creation vulnerability. However, the issue can only manifest if the software is invoked on a sudoers file that is contained in a world writable directory.
The visudo application creates a temporary file in the same directory as the sudoers file that is being edited. The temporary file is named using a easily predictable filename.
An attacker may exploit this vulnerability to corrupt arbitrary files with privileges of the superuser.
Exploit / POC
Sudo VISudo Insecure Temporary File Creation Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Sudo VISudo Insecure Temporary File Creation Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.