Debian dist Insecure Temporary File Creation Vulnerabilities

Bugtraq ID:	30908
Class:	Design Error
CVE:	CVE-2008-4949
Remote:	No
Local:	Yes
Published:	Aug 24 2008 12:00AM
Updated:	May 07 2015 05:24PM
Credit:	Dmitry E. Oboukhov
Vulnerable:	Debian dist 3.5-17-1
Not Vulnerable:

Debian dist Insecure Temporary File Creation Vulnerabilities

Debian 'dist' creates temporary files in an insecure manner.

An attacker with local access could potentially exploit these issues to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application.

Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.

Debian 'dist' 3.5-17-1 is vulnerable; other versions may also be affected.

Debian dist Insecure Temporary File Creation Vulnerabilities

An attacker uses readily available commands to exploit these issues.

Debian dist Insecure Temporary File Creation Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Debian dist Insecure Temporary File Creation Vulnerabilities

References:

• Debian Bug report logs - #496412 (Debian)
  
• Insecure tmp files in Debian packages (Dmitry E. Oboukhov)
  
• Package: dist (Debian)