CenterICQ Insecure Temporary File Creation Vulnerability
BID:14144
Info
CenterICQ Insecure Temporary File Creation Vulnerability
| Bugtraq ID: | 14144 |
| Class: | Design Error |
| CVE: |
CVE-2005-1914 |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 05 2005 12:00AM |
| Updated: | Jul 12 2009 04:06PM |
| Credit: | Eric Romang ([email protected] - ZATAZ Audit) is credited with the discovery of this vulnerability. |
| Vulnerable: |
Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Centericq Centericq 4.20 |
| Not Vulnerable: | |
Discussion
CenterICQ Insecure Temporary File Creation Vulnerability
Centericq creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to overwrite files in the context of the vulnerable application.
Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. There is also an unconfirmed potential for privilege escalation if the attacker can write custom data in the attack.
Centericq creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to overwrite files in the context of the vulnerable application.
Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. There is also an unconfirmed potential for privilege escalation if the attacker can write custom data in the attack.
Exploit / POC
CenterICQ Insecure Temporary File Creation Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
CenterICQ Insecure Temporary File Creation Vulnerability
Solution:
Debian has released advisory DSA 754-1 to address this issue. Please see the referenced advisory for more information.
Debian has released security advisory DSA 773-1 addressing several issues for their AMD64 port of the operating system. Please see the referenced advisory for further information.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Centericq Centericq 4.20
Solution:
Debian has released advisory DSA 754-1 to address this issue. Please see the referenced advisory for more information.
Debian has released security advisory DSA 773-1 addressing several issues for their AMD64 port of the operating system. Please see the referenced advisory for further information.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Centericq Centericq 4.20
-
Debian centericq-common_4.20.0-1sarge1_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge1_alpha.deb -
Debian centericq-common_4.20.0-1sarge1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge1_amd64.deb -
Debian centericq-common_4.20.0-1sarge1_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge1_arm.deb -
Debian centericq-common_4.20.0-1sarge1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge1_hppa.deb -
Debian centericq-common_4.20.0-1sarge1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge1_i386.deb -
Debian centericq-common_4.20.0-1sarge1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge1_ia64.deb -
Debian centericq-common_4.20.0-1sarge1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge1_m68k.deb -
Debian centericq-common_4.20.0-1sarge1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge1_mips.deb -
Debian centericq-common_4.20.0-1sarge1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge1_mipsel.deb -
Debian centericq-common_4.20.0-1sarge1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge1_powerpc.deb -
Debian centericq-common_4.20.0-1sarge1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge1_s390.deb -
Debian centericq-common_4.20.0-1sarge1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-com mon_4.20.0-1sarge1_sparc.deb -
Debian centericq-fribidi_4.20.0-1sarge1_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge1_alpha.deb -
Debian centericq-fribidi_4.20.0-1sarge1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge1_amd64.deb -
Debian centericq-fribidi_4.20.0-1sarge1_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge1_arm.deb -
Debian centericq-fribidi_4.20.0-1sarge1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge1_hppa.deb -
Debian centericq-fribidi_4.20.0-1sarge1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge1_i386.deb -
Debian centericq-fribidi_4.20.0-1sarge1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge1_ia64.deb -
Debian centericq-fribidi_4.20.0-1sarge1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge1_m68k.deb -
Debian centericq-fribidi_4.20.0-1sarge1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge1_mips.deb -
Debian centericq-fribidi_4.20.0-1sarge1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge1_mipsel.deb -
Debian centericq-fribidi_4.20.0-1sarge1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge1_powerpc.deb -
Debian centericq-fribidi_4.20.0-1sarge1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge1_s390.deb -
Debian centericq-fribidi_4.20.0-1sarge1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-fri bidi_4.20.0-1sarge1_sparc.deb -
Debian centericq-utf8_4.20.0-1sarge1_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge1_alpha.deb -
Debian centericq-utf8_4.20.0-1sarge1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge1_amd64.deb -
Debian centericq-utf8_4.20.0-1sarge1_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge1_arm.deb -
Debian centericq-utf8_4.20.0-1sarge1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge1_hppa.deb -
Debian centericq-utf8_4.20.0-1sarge1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge1_i386.deb -
Debian centericq-utf8_4.20.0-1sarge1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge1_ia64.deb -
Debian centericq-utf8_4.20.0-1sarge1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge1_m68k.deb -
Debian centericq-utf8_4.20.0-1sarge1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge1_mips.deb -
Debian centericq-utf8_4.20.0-1sarge1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge1_mipsel.deb -
Debian centericq-utf8_4.20.0-1sarge1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge1_powerpc.deb -
Debian centericq-utf8_4.20.0-1sarge1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge1_s390.deb -
Debian centericq-utf8_4.20.0-1sarge1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq-utf 8_4.20.0-1sarge1_sparc.deb -
Debian centericq_4.20.0-1sarge1_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge1_alpha.deb -
Debian centericq_4.20.0-1sarge1_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge1_amd64.deb -
Debian centericq_4.20.0-1sarge1_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge1_arm.deb -
Debian centericq_4.20.0-1sarge1_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge1_hppa.deb -
Debian centericq_4.20.0-1sarge1_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge1_i386.deb -
Debian centericq_4.20.0-1sarge1_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge1_ia64.deb -
Debian centericq_4.20.0-1sarge1_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge1_m68k.deb -
Debian centericq_4.20.0-1sarge1_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge1_mips.deb -
Debian centericq_4.20.0-1sarge1_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge1_mipsel.deb -
Debian centericq_4.20.0-1sarge1_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge1_powerpc.deb -
Debian centericq_4.20.0-1sarge1_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge1_s390.deb -
Debian centericq_4.20.0-1sarge1_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/c/centericq/centericq_4.2 0.0-1sarge1_sparc.deb
References
CenterICQ Insecure Temporary File Creation Vulnerability
References:
References:
- Centerciq Homepage (Centericq)
- centericq insecure temporary file creation (zataz)