am-utils 'expn' Insecure Temporary File Creation Vulnerability

Bugtraq ID:	28044
Class:	Race Condition Error
CVE:	CVE-2008-1078
Remote:	No
Local:	Yes
Published:	Feb 28 2008 12:00AM
Updated:	May 07 2015 05:18PM
Credit:	Tavis Ormandy is credited with discovering this issue.
Vulnerable:	rPath rPath Linux 1 Gentoo Linux Am-utils am-utils 6.0.9
Not Vulnerable:

am-utils 'expn' Insecure Temporary File Creation Vulnerability

The 'expn' utility of the 'am-utils' package creates temporary files in an insecure manner.

An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application.

Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.

am-utils 'expn' Insecure Temporary File Creation Vulnerability

An attacker uses readily available commands to exploit this issue.

am-utils 'expn' Insecure Temporary File Creation Vulnerability

Solution:
Please see the referenced advisories for information on obtaining and applying the appropriate updates.

am-utils 'expn' Insecure Temporary File Creation Vulnerability

References:

• am-utils Homepage (Am-utils)
  
• am-utils insecure creation of temporary file CVE-requested (rPath Linux)
  
• rPSA-2008-0088-1 am-utils (rPath Update Announcements )