Debian ltp 'ltpmenu' Insecure Temporary File Creation Vulnerability

Bugtraq ID:	32414
Class:	Design Error
CVE:	CVE-2008-5145
Remote:	No
Local:	Yes
Published:	Aug 11 2008 12:00AM
Updated:	Nov 22 2008 12:23AM
Credit:	Dmitry E. Oboukhov
Vulnerable:	Debian ltp 20060918 -2.1 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:

Debian ltp 'ltpmenu' Insecure Temporary File Creation Vulnerability

Debian 'ltp' creates temporary files in an insecure manner.

An attacker with local access could perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application.

Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.

Debian 'ltp' 20060918-2.1 is vulnerable; other versions may also be affected.

Debian ltp 'ltpmenu' Insecure Temporary File Creation Vulnerability

An attacker uses readily available commands to launch attacks.

Debian ltp 'ltpmenu' Insecure Temporary File Creation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Debian ltp 'ltpmenu' Insecure Temporary File Creation Vulnerability

References:

• ltp Homepage (Debian)
  
• Re: Possible mass bug filing: The possibility of attack with the help of symlink (Dmitry E. Oboukhov)