Antiword Insecure Temporary File Creation Vulnerabilities
BID:16278
Info
Antiword Insecure Temporary File Creation Vulnerabilities
| Bugtraq ID: | 16278 |
| Class: | Design Error |
| CVE: |
CVE-2005-3126 |
| Remote: | No |
| Local: | Yes |
| Published: | Jan 17 2006 12:00AM |
| Updated: | Jan 17 2006 12:00AM |
| Credit: | Javier Fernández-Sanguino Peña from the Debian Security Audit project discovered these issues. |
| Vulnerable: |
Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 3.0 sparc Debian Linux 3.0 s/390 Debian Linux 3.0 ppc Debian Linux 3.0 mipsel Debian Linux 3.0 mips Debian Linux 3.0 m68k Debian Linux 3.0 ia-64 Debian Linux 3.0 ia-32 Debian Linux 3.0 hppa Debian Linux 3.0 arm Debian Linux 3.0 alpha Debian Linux 3.0 Antiword Antiword 0.35 Antiword Antiword 0.32 |
| Not Vulnerable: | |
Discussion
Antiword Insecure Temporary File Creation Vulnerabilities
Antiword creates temporary files in an insecure manner.
Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. Other attacks may be possible as well.
Antiword creates temporary files in an insecure manner.
Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. Other attacks may be possible as well.
Exploit / POC
Antiword Insecure Temporary File Creation Vulnerabilities
An exploit is not required.
An exploit is not required.
Solution / Fix
Antiword Insecure Temporary File Creation Vulnerabilities
Solution:
Debian GNU/Linux has released advisory DSA 945-1, along with fixes to address these issues. Please see the referenced advisory for further information.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Debian GNU/Linux has released advisory DSA 945-1, along with fixes to address these issues. Please see the referenced advisory for further information.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.