Matt Welsh sgmltool Symlink Vulnerability
BID:2683
Info
Matt Welsh sgmltool Symlink Vulnerability
| Bugtraq ID: | 2683 |
| Class: | Origin Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 04 2001 12:00AM |
| Updated: | May 04 2001 12:00AM |
| Credit: | Reported to bugtraq by SuSE in an advisory dated Friday, May 4th, 2001. |
| Vulnerable: |
Matt Welsh sgmltool 1.0.9 |
| Not Vulnerable: | |
Discussion
Matt Welsh sgmltool Symlink Vulnerability
sgmltool is a suite of programs used in processing and coverting SGML files to other formats.
An sgmltool component makes insecure use of temporary files.
If an attacker can determine the name of the temporary file prior to its creation, a symbolic link could be created pointing to a target file for which the sgmltool process owner has write permissions.
In this event, sgmltool will overwrite the contents of the target file with its own output.
sgmltool is a suite of programs used in processing and coverting SGML files to other formats.
An sgmltool component makes insecure use of temporary files.
If an attacker can determine the name of the temporary file prior to its creation, a symbolic link could be created pointing to a target file for which the sgmltool process owner has write permissions.
In this event, sgmltool will overwrite the contents of the target file with its own output.
Exploit / POC
Matt Welsh sgmltool Symlink Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Matt Welsh sgmltool Symlink Vulnerability
Solution:
SuSE has released updated sgmltool packages.
Matt Welsh sgmltool 1.0.9
Solution:
SuSE has released updated sgmltool packages.
Matt Welsh sgmltool 1.0.9
-
S.u.S.E. 6.3 alpha sgmltool-1.0.9-281.alpha.rpm
ftp://ftp.suse.com/pub/suse/axp/update/6.3/sgm1/sgmltool-1.0.9-281.alp ha.rpm -
S.u.S.E. 6.3 i386 sgmltool-1.0.9-300.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/6.3/sgm1/sgmltool-1.0.9-300.i3 86.rpm -
S.u.S.E. 6.4 alpha sgmltool-1.0.9-281.alpha.rpm
ftp://ftp.suse.com/pub/suse/axp/update/6.4/sgm1/sgmltool-1.0.9-281.alp ha.rpm -
S.u.S.E. 6.4 i386 sgmltool-1.0.9-300.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/6.4/sgm1/sgmltool-1.0.9-300.i3 86.rpm -
S.u.S.E. 6.4 ppc sgmltool-1.0.9-216.ppc.rpm
ftp://ftp.suse.com/pub/suse/ppc/update/6.4/sgm1/sgmltool-1.0.9-216.ppc .rpm -
S.u.S.E. 7.0 alpha sgmltool-1.0.9-283.alpha.rpm
ftp://ftp.suse.com/pub/suse/axp/update/7.0/sgm1/sgmltool-1.0.9-283.alp ha.rpm -
S.u.S.E. 7.0 ppc sgmltool-1.0.9-216.ppc.rpm
ftp://ftp.suse.com/pub/suse/ppc/update/7.0/sgm1/sgmltool-1.0.9-216.ppc .rpm -
S.u.S.E. 7.0 sparc sgmltool-1.0.9-284.sparc.rpm
ftp://ftp.suse.com/pub/suse/sparc/update/7.0/sgm1/sgmltool-1.0.9-284.s parc.rpm -
S.u.S.E. 7.1 i386 sgmltool-1.0.9-302.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.1/sgm1/sgmltool-1.0.9-302.i3 86.rpm -
S.u.S.E. 7.1 sparc sgmltool-1.0.9-283.sparc.rpm
ftp://ftp.suse.com/pub/suse/sparc/update/7.1/sgm1/sgmltool-1.0.9-283.s parc.rpm
References
Matt Welsh sgmltool Symlink Vulnerability
References:
References: