Sun SNMP Management Agent Insecure Temporary File Creation Vulnerability
BID:33014
Info
Sun SNMP Management Agent Insecure Temporary File Creation Vulnerability
| Bugtraq ID: | 33014 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 24 2008 12:00AM |
| Updated: | Dec 31 2008 12:21AM |
| Credit: | Matthew Flanagan of Singtel Optus Pty Ltd |
| Vulnerable: |
Sun SNMP Management Agent('SUNWmasf') 1.5.4 |
| Not Vulnerable: |
Sun SNMP Management Agent('SUNWmasf') 1.5.5 |
Discussion
Sun SNMP Management Agent Insecure Temporary File Creation Vulnerability
Sun SNMP Management Agent creates temporary files in an insecure manner.
An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application.
Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in privilege escalation or cause a denial-of-service condition. Other attacks may also be possible.
SNMP Management Agent 'SUNWmasf' 1.4u2 up to and including 1.5.4 are vulnerable.
Sun SNMP Management Agent creates temporary files in an insecure manner.
An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application.
Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in privilege escalation or cause a denial-of-service condition. Other attacks may also be possible.
SNMP Management Agent 'SUNWmasf' 1.4u2 up to and including 1.5.4 are vulnerable.
Exploit / POC
Sun SNMP Management Agent Insecure Temporary File Creation Vulnerability
An attacker uses readily available commands to exploit this issue.
An attacker uses readily available commands to exploit this issue.
Solution / Fix
Sun SNMP Management Agent Insecure Temporary File Creation Vulnerability
Solution:
The vendor has released an update to address the issue. Please see the references for more information.
Solution:
The vendor has released an update to address the issue. Please see the references for more information.
References
Sun SNMP Management Agent Insecure Temporary File Creation Vulnerability
References:
References:
- Sun Solaris Home Page (Sun Microsystems)
- Insecure Temporary File Usage Vulnerability in Sun SNMP Management Agent (Sun)