Zsh Insecure Temporary File Creation Vulnerability
BID:26674
Info
Zsh Insecure Temporary File Creation Vulnerability
| Bugtraq ID: | 26674 |
| Class: | Race Condition Error |
| CVE: |
CVE-2007-6209 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 02 2007 12:00AM |
| Updated: | Dec 06 2007 10:02PM |
| Credit: | Elias Pipping was credited by Gentoo for discovering this vulnerability. |
| Vulnerable: |
Zsh Zsh 4.3.4 |
| Not Vulnerable: | |
Discussion
Zsh Insecure Temporary File Creation Vulnerability
Zsh is prone to a security vulnerability because it creates temporary files in an insecure manner.
An attacker with local access could potentially exploit this issue to perform symlink attacks, overwriting arbitrary files in the context of the affected application.
Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.
This issue affects Zsh 4.3.4; other versions may also be vulnerable.
Zsh is prone to a security vulnerability because it creates temporary files in an insecure manner.
An attacker with local access could potentially exploit this issue to perform symlink attacks, overwriting arbitrary files in the context of the affected application.
Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.
This issue affects Zsh 4.3.4; other versions may also be vulnerable.
Exploit / POC
Zsh Insecure Temporary File Creation Vulnerability
An attacker uses readily available commands to exploit the issue.
An attacker uses readily available commands to exploit the issue.
Solution / Fix
Zsh Insecure Temporary File Creation Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Zsh Insecure Temporary File Creation Vulnerability
References:
References:
- Bugzilla Bug 201022 (Pierre-Yves Rofes
- Zsh Home Page (Zsh)