Multiple Vendor xfs Symlink Vulnerability
BID:359
Info
Multiple Vendor xfs Symlink Vulnerability
| Bugtraq ID: | 359 |
| Class: | Origin Validation Error |
| CVE: |
CVE-1999-0434 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 30 1999 12:00AM |
| Updated: | Jul 11 2009 12:16AM |
| Credit: | First posted to BugTraq by Lukasz Trabinski <[email protected]> on March 30, 1999. |
| Vulnerable: |
SuSE Linux 5.3 Redhat Linux 5.1 Pacific HiTech TurboLinux 1.2 NetBSD NetBSD 1.3.3 Debian Linux 2.1 Debian Linux 2.0 r5 Debian Linux 2.0 Caldera OpenLinux Standard 1.2 |
| Not Vulnerable: | |
Discussion
Multiple Vendor xfs Symlink Vulnerability
Xfs, the Xfree86 font server included with RedHat 5.1 is vulnerable to a /tmp symbolic link attack. Xfs creates a file in /tmp called .font-unix that will be followed if a symlink. Any file pointed to by the symbolic link will be overwritten.
Xfs, the Xfree86 font server included with RedHat 5.1 is vulnerable to a /tmp symbolic link attack. Xfs creates a file in /tmp called .font-unix that will be followed if a symlink. Any file pointed to by the symbolic link will be overwritten.
Exploit / POC
Multiple Vendor xfs Symlink Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Multiple Vendor xfs Symlink Vulnerability
Solution:
Upgrade to XFree86 3.3.3.1-0.1. The other related XFree86 symbolic link vulnerabilities are fixed in this version as well.
Solution:
Upgrade to XFree86 3.3.3.1-0.1. The other related XFree86 symbolic link vulnerabilities are fixed in this version as well.
References
Multiple Vendor xfs Symlink Vulnerability
References:
References: