xSANE Insecure Temporary File Creation Vulnerability
BID:3700
Info
xSANE Insecure Temporary File Creation Vulnerability
| Bugtraq ID: | 3700 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 17 2001 12:00AM |
| Updated: | Dec 17 2001 12:00AM |
| Credit: | The origin of this vulnerability is unknown. |
| Vulnerable: |
Oliver Rauch xSANE 0.81 |
| Not Vulnerable: |
Oliver Rauch xSANE 0.82 |
Discussion
xSANE Insecure Temporary File Creation Vulnerability
xSANE is a graphical program used to communicate with scanners and digital video devices. It uses the SANE library to communicate with physical devices.
xSANE creates temporary files in the /tmp directory which have predictable file names. As a result, it is possible for a local user to create a symbolic link to any file that is write-accessible by the user executing xSANE, and overwrite the contents of the file.
Earlier versions of xSANE may also be vulnerable.
xSANE is a graphical program used to communicate with scanners and digital video devices. It uses the SANE library to communicate with physical devices.
xSANE creates temporary files in the /tmp directory which have predictable file names. As a result, it is possible for a local user to create a symbolic link to any file that is write-accessible by the user executing xSANE, and overwrite the contents of the file.
Earlier versions of xSANE may also be vulnerable.
Exploit / POC
xSANE Insecure Temporary File Creation Vulnerability
No exploit is required for this vulnerability.
No exploit is required for this vulnerability.
Solution / Fix
xSANE Insecure Temporary File Creation Vulnerability
Solution:
This vulnerability has been fixed in version 0.82 of xSANE. Additional upgrades are also available.
Oliver Rauch xSANE 0.81
Solution:
This vulnerability has been fixed in version 0.82 of xSANE. Additional upgrades are also available.
Oliver Rauch xSANE 0.81
-
FreeBSD 4 stable i386 xsane-0.82.tgz
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-4-stable/graphic s/xsane-0.82.tgz -
FreeBSD 5 current i386 xsane-0.82.tgz
ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-5-current/graphi cs/xsane-0.82.tgz -
Red Hat sane-1.0.3-10.1.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/sane-1.0.3-10.1.alpha.rpm -
Red Hat sane-1.0.3-10.1.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/sane-1.0.3-10.1.i386.rpm -
Red Hat sane-1.0.3-10.1.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/sane-1.0.3-10.1.ia64.rpm -
Red Hat sane-1.0.3-2.1.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/sane-1.0.3-2.1.alpha.rpm -
Red Hat sane-1.0.3-2.1.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/sane-1.0.3-2.1.i386.rpm -
Red Hat sane-backends-1.0.5-4.1.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/sane-backends-1.0.5-4.1.i386.r pm -
Red Hat sane-backends-1.0.5-4.1.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/sane-backends-1.0.5-4.1.ia64.r pm -
Red Hat sane-backends-devel-1.0.5-4.1.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/sane-backends-devel-1.0.5-4.1. i386.rpm -
Red Hat sane-backends-devel-1.0.5-4.1.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/sane-backends-devel-1.0.5-4.1. ia64.rpm -
Red Hat sane-devel-1.0.3-10.1.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/sane-devel-1.0.3-10.1.alpha.r pm -
Red Hat sane-devel-1.0.3-10.1.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/sane-devel-1.0.3-10.1.i386.rpm -
Red Hat sane-devel-1.0.3-10.1.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/sane-devel-1.0.3-10.1.ia64.rpm -
Red Hat sane-devel-1.0.3-2.1.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/sane-devel-1.0.3-2.1.alpha.rp m -
Red Hat sane-devel-1.0.3-2.1.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/sane-devel-1.0.3-2.1.i386.rpm -
Red Hat xsane-0.82-2.1.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/xsane-0.82-2.1.alpha.rpm -
Red Hat xsane-0.82-2.1.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/xsane-0.82-2.1.i386.rpm -
Red Hat xsane-0.82-3.1.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/xsane-0.82-3.1.alpha.rpm -
Red Hat xsane-0.82-3.1.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/xsane-0.82-3.1.i386.rpm -
Red Hat xsane-0.82-3.1.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/xsane-0.82-3.1.i386.rpm -
Red Hat xsane-0.82-3.1.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/xsane-0.82-3.1.ia64.rpm -
Red Hat xsane-0.82-3.1.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/xsane-0.82-3.1.ia64.rpm -
Red Hat xsane-gimp-0.82-2.1.alpha.rpm
ftp://updates.redhat.com/7.0/en/os/alpha/xsane-gimp-0.82-2.1.alpha.rpm -
Red Hat xsane-gimp-0.82-2.1.i386.rpm
ftp://updates.redhat.com/7.0/en/os/i386/xsane-gimp-0.82-2.1.i386.rpm -
Red Hat xsane-gimp-0.82-3.1.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/xsane-gimp-0.82-3.1.alpha.rpm -
Red Hat xsane-gimp-0.82-3.1.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/xsane-gimp-0.82-3.1.i386.rpm -
Red Hat xsane-gimp-0.82-3.1.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/xsane-gimp-0.82-3.1.i386.rpm -
Red Hat xsane-gimp-0.82-3.1.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/xsane-gimp-0.82-3.1.ia64.rpm -
Red Hat xsane-gimp-0.82-3.1.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/xsane-gimp-0.82-3.1.ia64.rpm
References
xSANE Insecure Temporary File Creation Vulnerability
References:
References: