Apple Mac OS X Certificate Assistant Insecure Temporary File Creation Vulnerability

Bugtraq ID:	33810
Class:	Design Error
CVE:	CVE-2009-0011
Remote:	No
Local:	Yes
Published:	Feb 12 2009 12:00AM
Updated:	Feb 18 2009 03:38PM
Credit:	Apple
Vulnerable:	Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.5
Not Vulnerable:

Apple Mac OS X Certificate Assistant Insecure Temporary File Creation Vulnerability

Apple Mac OS X Certificate Assistant creates temporary files in an insecure manner.

An attacker with local access may exploit this issue to overwrite files with the privileges of a local user running Certificate Assistant.

This issue affects Mac OS X 10.5.6 (both client and server).

NOTE: This issue was previously covered in BID 33759 (Apple Mac OS X 2009-001 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.

Apple Mac OS X Certificate Assistant Insecure Temporary File Creation Vulnerability

An attacker uses readily available commands to exploit this issue.

Apple Mac OS X Certificate Assistant Insecure Temporary File Creation Vulnerability

Solution:
Updates are available. Please see the references for more information.


Apple Mac OS X Server 10.5.6

• Apple SecUpdSrvr2009-001.dmg
  http://support.apple.com/downloads/Security_Update_2009_001__Server_Le opard_

Apple Mac OS X 10.5.6

• Apple SecUpd2009-001.dmg
  http://support.apple.com/downloads/Security_Update_2009_001__Leopard_

Apple Mac OS X Certificate Assistant Insecure Temporary File Creation Vulnerability

References:

• About the security content of Security Update 2009-001 (Apple)
  
• Cisco TelePresence Video Communication Server (VCS) Homepage (Cisco)