GNOME Workstation Command Center Gwcc_out.TXT Insecure Temporary File Creation Vulnerability
BID:14857
Info
GNOME Workstation Command Center Gwcc_out.TXT Insecure Temporary File Creation Vulnerability
| Bugtraq ID: | 14857 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 16 2005 12:00AM |
| Updated: | Sep 16 2005 12:00AM |
| Credit: | D1g1t4lLeech and [email protected] are credited with the discovery of this vulnerability. |
| Vulnerable: |
GNOME Workstation Command Center 0.9.8 |
| Not Vulnerable: | |
Discussion
GNOME Workstation Command Center Gwcc_out.TXT Insecure Temporary File Creation Vulnerability
GNOME Workstation Command Center creates temporary files in an insecure manner.
A local attacker would most likely take advantage of this vulnerability by creating a malicious symbolic link in a directory where the temporary files will be created.
Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. Other attacks may also be possible.
GNOME Workstation Command Center version 0.98 is reported to be vulnerable. Other earlier versions may also be affected.
GNOME Workstation Command Center creates temporary files in an insecure manner.
A local attacker would most likely take advantage of this vulnerability by creating a malicious symbolic link in a directory where the temporary files will be created.
Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. Other attacks may also be possible.
GNOME Workstation Command Center version 0.98 is reported to be vulnerable. Other earlier versions may also be affected.
Exploit / POC
GNOME Workstation Command Center Gwcc_out.TXT Insecure Temporary File Creation Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
GNOME Workstation Command Center Gwcc_out.TXT Insecure Temporary File Creation Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
GNOME Workstation Command Center Gwcc_out.TXT Insecure Temporary File Creation Vulnerability
References:
References:
- GNOME Workstation Command Center Web Site (GNOME Workstation Command Center)