TkDiff Insecure Temporary File Creation Vulnerability

Bugtraq ID:	16064
Class:	Design Error
CVE:	CVE-2005-3343
Remote:	No
Local:	Yes
Published:	Dec 27 2005 12:00AM
Updated:	May 18 2006 07:53PM
Credit:	Discovered by Javier Fernandez-Sanguino Pena.
Vulnerable:	TkDiff TkDiff 4.1 TkDiff TkDiff 4.0.2 + Debian Linux 3.1 sparc + Debian Linux 3.1 s/390 + Debian Linux 3.1 ppc + Debian Linux 3.1 mipsel + Debian Linux 3.1 mips + Debian Linux 3.1 m68k + Debian Linux 3.1 ia-64 + Debian Linux 3.1 ia-32 + Debian Linux 3.1 hppa + Debian Linux 3.1 arm + Debian Linux 3.1 amd64 + Debian Linux 3.1 alpha + Debian Linux 3.1 TkDiff TkDiff 4.0 TkDiff TkDiff 3.0.9 TkDiff TkDiff 3.0.8 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 TkCVS TkCVS 7.2.2 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 Mandriva Linux Mandrake 10.2 x86_64 Mandriva Linux Mandrake 10.2
Not Vulnerable:	TkDiff TkDiff 4.1.1

TkDiff Insecure Temporary File Creation Vulnerability

TkDiff creates temporary files in an insecure manner.

Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. Other attacks may be possible as well.

TkDiff 4.1 and prior versions are vulnerable to this issue.

TkDiff Insecure Temporary File Creation Vulnerability

An exploit is not required.

TkDiff Insecure Temporary File Creation Vulnerability

Solution:
The vendor has released TkDiff 4.1.1 to address this issue.

Please see the referenced advisories for more information.


TkDiff TkDiff 3.0.8

• Debian tkdiff_3.08-3woody0_all.deb
  Debian GNU/Linux 3.0 alias woody
  http://security.debian.org/pool/updates/main/t/tkdiff/tkdiff_3.08-3woo dy0_all.deb


• Debian tkdiff_3.08-3woody1_all.deb
  http://security.debian.org/pool/updates/main/t/tkdiff/tkdiff_3.08-3woo dy1_all.deb


• TkDiff tkdiff_4_1_1.tar.gz
  http://freshmeat.net/redir/tkdiff/10603/url_tgz/tkdiff_4_1_1.tar.gz

TkDiff TkDiff 3.0.9

• TkDiff tkdiff_4_1_1.tar.gz
  http://freshmeat.net/redir/tkdiff/10603/url_tgz/tkdiff_4_1_1.tar.gz

TkDiff TkDiff 4.0

• TkDiff tkdiff_4_1_1.tar.gz
  http://freshmeat.net/redir/tkdiff/10603/url_tgz/tkdiff_4_1_1.tar.gz

TkDiff TkDiff 4.0.2

• Debian tkdiff_4.0.2-1sarge0_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/t/tkdiff/tkdiff_4.0.2-1sa rge0_all.deb


• Debian tkdiff_4.0.2-1sarge1_all.deb
  http://security.debian.org/pool/updates/main/t/tkdiff/tkdiff_4.0.2-1sa rge1_all.deb


• TkDiff tkdiff_4_1_1.tar.gz
  http://freshmeat.net/redir/tkdiff/10603/url_tgz/tkdiff_4_1_1.tar.gz

TkDiff TkDiff 4.1

• TkDiff tkdiff_4_1_1.tar.gz
  http://freshmeat.net/redir/tkdiff/10603/url_tgz/tkdiff_4_1_1.tar.gz

TkDiff Insecure Temporary File Creation Vulnerability

References:

• TkDiff Home Page (TkDiff)