Redhat Sysreport Insecure Temporary File Creation Vulnerability
BID:15379
Info
Redhat Sysreport Insecure Temporary File Creation Vulnerability
| Bugtraq ID: | 15379 |
| Class: | Race Condition Error |
| CVE: |
CVE-2005-2104 |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 09 2005 12:00AM |
| Updated: | Jul 12 2009 05:56PM |
| Credit: | Bill Stearns is credited with the discovery of this vulnerability. |
| Vulnerable: |
Redhat Fedora Core4 Redhat Fedora Core3 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux WS 2.1 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux ES 2.1 Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux AS 2.1 Redhat Advanced Workstation for the Itanium Processor 2.1 |
| Not Vulnerable: | |
Discussion
Redhat Sysreport Insecure Temporary File Creation Vulnerability
Redhat sysreport creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to obtain sensitive information in the context of the affected computer.
Exploitation would most likely result in loss of confidentiality, data or a denial of service if critical files are overwritten in the attack. Other attacks may be possible as well.
Redhat sysreport creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to obtain sensitive information in the context of the affected computer.
Exploitation would most likely result in loss of confidentiality, data or a denial of service if critical files are overwritten in the attack. Other attacks may be possible as well.
Exploit / POC
Redhat Sysreport Insecure Temporary File Creation Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Redhat Sysreport Insecure Temporary File Creation Vulnerability
Solution:
Redhat has released security update RHSA-2005:598-04 to address this issue; please see the referenced advisory for further details.
Redhat Fedora has released security update FEDORA-2005-1071 and FEDORA-2005-1072 to address this issue in Fedora Core 3 and 4; please see the referenced advisories for further details.
Solution:
Redhat has released security update RHSA-2005:598-04 to address this issue; please see the referenced advisory for further details.
Redhat Fedora has released security update FEDORA-2005-1071 and FEDORA-2005-1072 to address this issue in Fedora Core 3 and 4; please see the referenced advisories for further details.
References
Redhat Sysreport Insecure Temporary File Creation Vulnerability
References:
References:
- sysreport security update (Redhat)