GForge Insecure Temporary File Creation Vulnerability

Bugtraq ID:	26373
Class:	Design Error
CVE:	CVE-2007-3921
Remote:	No
Local:	Yes
Published:	Nov 07 2007 12:00AM
Updated:	Nov 07 2007 10:35PM
Credit:	Steve Kemp is credited with the discovery of this vulnerability.
Vulnerable:	Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Debian GForge 4.5 Debian GForge 3.1
Not Vulnerable:

GForge Insecure Temporary File Creation Vulnerability

GForge creates temporary files in an insecure way.

An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. This may result in denial-of-service conditions; other attacks are also possible.

GForge Insecure Temporary File Creation Vulnerability

An attacker uses readily available commands to exploit this issue.

GForge Insecure Temporary File Creation Vulnerability

Solution:
Debian has released updates that address this issue. Please see the referenced advisory for more information.

GForge Insecure Temporary File Creation Vulnerability

References:

• GForge Homepage (GForge)