sblim-sfcb 'genSslCert.sh' Insecure Temporary File Creation Vulnerability

Bugtraq ID:	33583
Class:	Design Error
CVE:	CVE-2009-0416
Remote:	No
Local:	Yes
Published:	Feb 03 2009 12:00AM
Updated:	Feb 18 2009 10:37PM
Credit:	Klaus Kämpf
Vulnerable:	sblim sblim-sfcb 1.3.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0
Not Vulnerable:

sblim-sfcb 'genSslCert.sh' Insecure Temporary File Creation Vulnerability

The 'sblim-sfcb' package creates temporary files in an insecure manner.

An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application.

Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.

This issue affects sblim-sfcb 1.3.2; other versions may also be affected.

sblim-sfcb 'genSslCert.sh' Insecure Temporary File Creation Vulnerability

An attacker uses readily available commands to exploit this issue.

sblim-sfcb 'genSslCert.sh' Insecure Temporary File Creation Vulnerability

Solution:
Updates are available. Please see the references for more information.

sblim-sfcb 'genSslCert.sh' Insecure Temporary File Creation Vulnerability

References:

• [ 2561165 ] The genSslCert.sh SSL certificate setup has tempfile races. (Klaus Kämpf)
  
• CVE Request: sblim-sfcb genSslCert.sh temp race (Marcus Meissner)
  
• SBLIM Homepage (sblim)