PCSC-Lite Local Insecure File Permissions Vulnerability
BID:35444
Info
PCSC-Lite Local Insecure File Permissions Vulnerability
| Bugtraq ID: | 35444 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jun 19 2009 12:00AM |
| Updated: | Jun 22 2009 08:19PM |
| Credit: | Tomas Mraz |
| Vulnerable: |
Red Hat Fedora 11 PCSC-Lite PCSC-Lite 1.5.2 |
| Not Vulnerable: |
PCSC-Lite PCSC-Lite 1.5.2 -2 |
Discussion
PCSC-Lite Local Insecure File Permissions Vulnerability
PCSC-Lite is prone to a local insecure-file-permissions vulnerability.
A local attacker can exploit this issue to gain unauthorized access to certain files. This may lead to denial-of-service conditions; other attacks may also be possible.
PCSC-Lite is prone to a local insecure-file-permissions vulnerability.
A local attacker can exploit this issue to gain unauthorized access to certain files. This may lead to denial-of-service conditions; other attacks may also be possible.
Exploit / POC
PCSC-Lite Local Insecure File Permissions Vulnerability
A local attacker can use readily available tools to exploit this issue.
A local attacker can use readily available tools to exploit this issue.
Solution / Fix
PCSC-Lite Local Insecure File Permissions Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
PCSC-Lite Local Insecure File Permissions Vulnerability
References:
References:
- PCSC-Lite Homepage (PCSC-Lite)
- Red Hat Bugzilla Bug 503211 pcscd creates a world writable directory (Tomas Mraz)
- revision 4213 (PCSC-Lite)