Net-SNMP Fixproc Insecure Temporary File Creation Vulnerability
BID:13715
Info
Net-SNMP Fixproc Insecure Temporary File Creation Vulnerability
| Bugtraq ID: | 13715 |
| Class: | Design Error |
| CVE: |
CVE-2005-1740 |
| Remote: | No |
| Local: | Yes |
| Published: | May 23 2005 12:00AM |
| Updated: | Aug 17 2011 01:30PM |
| Credit: | eromang <[email protected]> is credited with the discovery of this issue. |
| Vulnerable: |
Sun Solaris 10_x86 Sun Solaris 10_sparc RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux ES 4 RedHat Enterprise Linux ES 3 RedHat Enterprise Linux AS 4 RedHat Enterprise Linux AS 3 RedHat Desktop 4.0 RedHat Desktop 3.0 Red Hat Fedora Core4 Red Hat Fedora Core3 Net-SNMP Net-SNMP 5.2.1 Net-SNMP Net-SNMP 5.2 Net-SNMP Net-SNMP 5.1.2 Net-SNMP Net-SNMP 5.1.1 Net-SNMP Net-SNMP 5.1 Net-SNMP Net-SNMP 5.0.9 Net-SNMP Net-SNMP 5.0.8 Net-SNMP Net-SNMP 5.0.7 Net-SNMP Net-SNMP 5.0.6 Net-SNMP Net-SNMP 5.0.5 Net-SNMP Net-SNMP 5.0.4 .pre2 Net-SNMP Net-SNMP 5.0.3 Net-SNMP Net-SNMP 5.0.1 MandrakeSoft Multi Network Firewall 2.0 MandrakeSoft Linux Mandrake 10.2 x86_64 MandrakeSoft Linux Mandrake 10.2 MandrakeSoft Linux Mandrake 10.1 x86_64 MandrakeSoft Linux Mandrake 10.1 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 Avaya Modular Messaging (MSS) 2.0 Avaya Modular Messaging (MSS) 1.1 Avaya Integrated Management 2.1 Avaya Integrated Management Avaya CVLAN Apache Software Foundation Apache 1.3.33 Apache Software Foundation Apache 1.3.32 Apache Software Foundation Apache 1.3.31 Apache Software Foundation Apache 1.3.29 Apache Software Foundation Apache 1.3.28 Apache Software Foundation Apache 1.3.27 Apache Software Foundation Apache 1.3.26 Apache Software Foundation Apache 1.3.25 Apache Software Foundation Apache 1.3.24 Apache Software Foundation Apache 1.3.23 Apache Software Foundation Apache 1.3.22 Apache Software Foundation Apache 1.3.20 Apache Software Foundation Apache 1.3.19 Apache Software Foundation Apache 1.3.18 Apache Software Foundation Apache 1.3.17 Apache Software Foundation Apache 1.3.14 Apache Software Foundation Apache 1.3.12 Apache Software Foundation Apache 1.3.11 Apache Software Foundation Apache 1.3.9 Apache Software Foundation Apache 1.3.7 -dev Apache Software Foundation Apache 1.3.6 Apache Software Foundation Apache 1.3.4 Apache Software Foundation Apache 1.3.3 Apache Software Foundation Apache 1.3.1 Apache Software Foundation Apache 1.3 |
| Not Vulnerable: | |
Discussion
Net-SNMP Fixproc Insecure Temporary File Creation Vulnerability
A local insecure temporary file-creation vulnerability affects Net-SNMP's fixproc. This issue is due to the utility's failure to securely create temporary files in world-writable locations.
An attacker may leverage this issue to corrupt, write to, or create arbitrary files, as well as execute arbitrary code with the privileges of the user or process running the vulnerable script. This may facilitate privilege escalation.
A local insecure temporary file-creation vulnerability affects Net-SNMP's fixproc. This issue is due to the utility's failure to securely create temporary files in world-writable locations.
An attacker may leverage this issue to corrupt, write to, or create arbitrary files, as well as execute arbitrary code with the privileges of the user or process running the vulnerable script. This may facilitate privilege escalation.
Exploit / POC
Net-SNMP Fixproc Insecure Temporary File Creation Vulnerability
No exploit is required to leverage this issue.
No exploit is required to leverage this issue.
Solution / Fix
Net-SNMP Fixproc Insecure Temporary File Creation Vulnerability
Solution:
Please see the referenced advisories for more information.
Apache Software Foundation Apache 1.3.31
Net-SNMP Net-SNMP 5.1
Net-SNMP Net-SNMP 5.1.2
Net-SNMP Net-SNMP 5.2.1
Solution:
Please see the referenced advisories for more information.
Apache Software Foundation Apache 1.3.31
-
Ubuntu apache-common_1.3.31-6ubuntu0.4_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/a/apache/apache-common_1.3 .31-6ubuntu0.4_amd64.deb -
Ubuntu apache-common_1.3.31-6ubuntu0.4_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/a/apache/apache-common_1.3 .31-6ubuntu0.4_i386.deb -
Ubuntu apache-common_1.3.31-6ubuntu0.4_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/a/apache/apache-common_1.3 .31-6ubuntu0.4_powerpc.deb -
Ubuntu apache-dbg_1.3.31-6ubuntu0.4_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-dbg_1. 3.31-6ubuntu0.4_amd64.deb -
Ubuntu apache-dbg_1.3.31-6ubuntu0.4_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-dbg_1. 3.31-6ubuntu0.4_i386.deb -
Ubuntu apache-dbg_1.3.31-6ubuntu0.4_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-dbg_1. 3.31-6ubuntu0.4_powerpc.deb -
Ubuntu apache-dev_1.3.31-6ubuntu0.4_all.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/a/apache/apache-dev_1.3.31 -6ubuntu0.4_all.deb -
Ubuntu apache-doc_1.3.31-6ubuntu0.4_all.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-doc_1. 3.31-6ubuntu0.4_all.deb -
Ubuntu apache-perl_1.3.31-6ubuntu0.4_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-perl_1 .3.31-6ubuntu0.4_amd64.deb -
Ubuntu apache-perl_1.3.31-6ubuntu0.4_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-perl_1 .3.31-6ubuntu0.4_i386.deb -
Ubuntu apache-perl_1.3.31-6ubuntu0.4_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-perl_1 .3.31-6ubuntu0.4_powerpc.deb -
Ubuntu apache-ssl_1.3.31-6ubuntu0.4_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-ssl_1. 3.31-6ubuntu0.4_amd64.deb -
Ubuntu apache-ssl_1.3.31-6ubuntu0.4_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-ssl_1. 3.31-6ubuntu0.4_i386.deb -
Ubuntu apache-ssl_1.3.31-6ubuntu0.4_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-ssl_1. 3.31-6ubuntu0.4_powerpc.deb -
Ubuntu apache-utils_1.3.31-6ubuntu0.4_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/a/apache/apache-utils_1.3. 31-6ubuntu0.4_amd64.deb -
Ubuntu apache-utils_1.3.31-6ubuntu0.4_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/a/apache/apache-utils_1.3. 31-6ubuntu0.4_i386.deb -
Ubuntu apache-utils_1.3.31-6ubuntu0.4_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/main/a/apache/apache-utils_1.3. 31-6ubuntu0.4_powerpc.deb -
Ubuntu apache_1.3.31-6ubuntu0.4_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache_1.3.31 -6ubuntu0.4_amd64.deb -
Ubuntu apache_1.3.31-6ubuntu0.4_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache_1.3.31 -6ubuntu0.4_i386.deb -
Ubuntu apache_1.3.31-6ubuntu0.4_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache_1.3.31 -6ubuntu0.4_powerpc.deb -
Ubuntu libapache-mod-perl_1.29.0.2-14ubuntu0.1_amd64.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/libapache-mod -perl_1.29.0.2-14ubuntu0.1_amd64.deb -
Ubuntu libapache-mod-perl_1.29.0.2-14ubuntu0.1_i386.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/libapache-mod -perl_1.29.0.2-14ubuntu0.1_i386.deb -
Ubuntu libapache-mod-perl_1.29.0.2-14ubuntu0.1_powerpc.deb
Ubuntu 4.10 (Warty Warthog)
http://security.ubuntu.com/ubuntu/pool/universe/a/apache/libapache-mod -perl_1.29.0.2-14ubuntu0.1_powerpc.deb
Net-SNMP Net-SNMP 5.1
-
Mandriva lib64net-snmp5-5.1-7.2.C30mdk.x86_64.rpm
Corporate 3.0/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva lib64net-snmp5-devel-5.1-7.2.C30mdk.x86_64.rpm
Corporate 3.0/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva lib64net-snmp5-static-devel-5.1-7.2.C30mdk.x86_64.rpm
Corporate 3.0/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva libnet-snmp5-5.1-7.1.M20mdk.i586.rpm
Multi Network Firewall 2.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva libnet-snmp5-5.1-7.2.C30mdk.i586.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva libnet-snmp5-devel-5.1-7.2.C30mdk.i586.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva libnet-snmp5-static-devel-5.1-7.2.C30mdk.i586.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-5.1-7.2.C30mdk.i586.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-5.1-7.2.C30mdk.x86_64.rpm
Corporate 3.0/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-mibs-5.1-7.2.C30mdk.i586.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-mibs-5.1-7.2.C30mdk.x86_64.rpm
Corporate 3.0/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-trapd-5.1-7.2.C30mdk.i586.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-trapd-5.1-7.2.C30mdk.x86_64.rpm
Corporate 3.0/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-utils-5.1-7.2.C30mdk.i586.rpm
Corporate 3.0:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-utils-5.1-7.2.C30mdk.x86_64.rpm
Corporate 3.0/X86_64:
http://wwwnew.mandriva.com/en/downloads/
Net-SNMP Net-SNMP 5.1.2
-
Mandriva lib64net-snmp5-5.1.2-6.1.101mdk.x86_64.rpm
Mandriva Linux 10.1/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva lib64net-snmp5-devel-5.1.2-6.1.101mdk.x86_64.rpm
Mandriva Linux 10.1/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva lib64net-snmp5-static-devel-5.1.2-6.1.101mdk.x86_64.rpm
Mandriva Linux 10.1/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva libnet-snmp5-5.1.2-6.1.101mdk.i586.rpm
Mandriva Linux 10.1:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva libnet-snmp5-devel-5.1.2-6.1.101mdk.i586.rpm
Mandriva Linux 10.1:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva libnet-snmp5-static-devel-5.1.2-6.1.101mdk.i586.rpm
Mandriva Linux 10.1:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-5.1.2-6.1.101mdk.i586.rpm
Mandriva Linux 10.1:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-5.1.2-6.1.101mdk.x86_64.rpm
Mandriva Linux 10.1/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-mibs-5.1.2-6.1.101mdk.i586.rpm
Mandriva Linux 10.1:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-mibs-5.1.2-6.1.101mdk.x86_64.rpm
Mandriva Linux 10.1/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-trapd-5.1.2-6.1.101mdk.i586.rpm
Mandriva Linux 10.1:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-trapd-5.1.2-6.1.101mdk.x86_64.rpm
Mandriva Linux 10.1/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-utils-5.1.2-6.1.101mdk.i586.rpm
Mandriva Linux 10.1:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-utils-5.1.2-6.1.101mdk.x86_64.rpm
Mandriva Linux 10.1/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva perl-NetSNMP-5.1.2-6.1.101mdk.i586.rpm
Mandriva Linux 10.1:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva perl-NetSNMP-5.1.2-6.1.101mdk.x86_64.rpm
Mandriva Linux 10.1/X86_64:
http://wwwnew.mandriva.com/en/downloads/
Net-SNMP Net-SNMP 5.2.1
-
Mandriva lib64net-snmp5-5.2.1-3.1.102mdk.x86_64.rpm
Mandriva Linux 10.2/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva lib64net-snmp5-devel-5.2.1-3.1.102mdk.x86_64.rpm
Mandriva Linux 10.2/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva lib64net-snmp5-static-devel-5.2.1-3.1.102mdk.x86_64.rpm
Mandriva Linux 10.2/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva libnet-snmp5-5.2.1-3.1.102mdk.i586.rpm
Mandriva Linux 10.2:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva libnet-snmp5-devel-5.2.1-3.1.102mdk.i586.rpm
Mandriva Linux 10.2:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva libnet-snmp5-static-devel-5.2.1-3.1.102mdk.i586.rpm
Mandriva Linux 10.2:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-5.2.1-3.1.102mdk.i586.rpm
Mandriva Linux 10.2:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-5.2.1-3.1.102mdk.x86_64.rpm
Mandriva Linux 10.2/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-mibs-5.2.1-3.1.102mdk.i586.rpm
Mandriva Linux 10.2:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-mibs-5.2.1-3.1.102mdk.x86_64.rpm
Mandriva Linux 10.2/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-trapd-5.2.1-3.1.102mdk.i586.rpm
Mandriva Linux 10.2:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-trapd-5.2.1-3.1.102mdk.x86_64.rpm
Mandriva Linux 10.2/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-utils-5.2.1-3.1.102mdk.i586.rpm
Mandriva Linux 10.2:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva net-snmp-utils-5.2.1-3.1.102mdk.x86_64.rpm
Mandriva Linux 10.2/X86_64:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva perl-NetSNMP-5.2.1-3.1.102mdk.i586.rpm
Mandriva Linux 10.2:
http://wwwnew.mandriva.com/en/downloads/ -
Mandriva perl-NetSNMP-5.2.1-3.1.102mdk.x86_64.rpm
Mandriva Linux 10.2/X86_64:
http://wwwnew.mandriva.com/en/downloads/
References
Net-SNMP Fixproc Insecure Temporary File Creation Vulnerability
References:
References:
- Apache Homepage (Apache Software Foundation)
- ASA-2005-225 - ucd-snmp and net-snmp security update - (RHSA-2005-373 RHSA-2005- (Avaya)
- Bugzilla Bug 91792 - net-analyzer/net-snmp fixproc insecure temporary file creat (Gentoo)
- CVE-2005-1740 Vulnerability in Net-snmp (Oracle)
- Debian Bug report logs - #290974 - apache: Temporary usage bugs that can be used (Debian)
- Net-SNMP Homepage (Net-SNMP)
- RHSA-2005:395-18 - net-snmp security update (RedHat)