GNU Coreutils Insecure Temporary File Creation Vulnerability
BID:37256
Info
GNU Coreutils Insecure Temporary File Creation Vulnerability
| Bugtraq ID: | 37256 |
| Class: | Design Error |
| CVE: |
CVE-2009-4135 |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 08 2009 12:00AM |
| Updated: | Apr 13 2015 09:36PM |
| Credit: | Jim Meyering |
| Vulnerable: |
Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Pardus Linux 2009 0 Mandriva Linux Mandrake 2010.0 x86_64 Mandriva Linux Mandrake 2010.0 Mandriva Linux Mandrake 2009.1 x86_64 Mandriva Linux Mandrake 2009.1 Mandriva Linux Mandrake 2009.0 x86_64 Mandriva Linux Mandrake 2009.0 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 4.0 GNU Coreutils 5.2.1 GNU Coreutils 8.1 |
| Not Vulnerable: | |
Discussion
GNU Coreutils Insecure Temporary File Creation Vulnerability
GNU Coreutils creates temporary files in an insecure manner.
An attacker with local access could obtain sensitive information or perform symbolic-link attacks to overwrite arbitrary files in the context of the affected application.
Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.
GNU Coreutils 5.2.1 through 8.1 are vulnerable.
GNU Coreutils creates temporary files in an insecure manner.
An attacker with local access could obtain sensitive information or perform symbolic-link attacks to overwrite arbitrary files in the context of the affected application.
Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.
GNU Coreutils 5.2.1 through 8.1 are vulnerable.
Exploit / POC
GNU Coreutils Insecure Temporary File Creation Vulnerability
An attacker can use readily available commands to launch attacks.
An attacker can use readily available commands to launch attacks.
Solution / Fix
GNU Coreutils Insecure Temporary File Creation Vulnerability
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.0 x86_64
Mandriva Linux Mandrake 2009.1 x86_64
Mandriva Linux Mandrake 2009.0
MandrakeSoft Enterprise Server 5 x86_64
MandrakeSoft Corporate Server 4.0
Mandriva Linux Mandrake 2009.0 x86_64
Mandriva Linux Mandrake 2008.0 x86_64
MandrakeSoft Enterprise Server 5
Mandriva Linux Mandrake 2008.0
Mandriva Linux Mandrake 2009.1
Mandriva Linux Mandrake 2010.0
MandrakeSoft Corporate Server 4.0 x86_64
Solution:
Updates are available. Please see the references for more information.
Mandriva Linux Mandrake 2010.0 x86_64
-
Mandriva coreutils-7.5-2.1mdv2010.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva coreutils-doc-7.5-2.1mdv2010.0.x86_64.rpm
http://www.mandriva.com/en/download/
Mandriva Linux Mandrake 2009.1 x86_64
-
Mandriva coreutils-7.1-2.1mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva coreutils-doc-7.1-2.1mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/
Mandriva Linux Mandrake 2009.0
-
Mandriva coreutils-6.12-2.5mdv2009.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva coreutils-doc-6.12-2.5mdv2009.0.i586.rpm
http://www.mandriva.com/en/download/
MandrakeSoft Enterprise Server 5 x86_64
-
Mandriva coreutils-6.12-2.5mdvmes5.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva coreutils-doc-6.12-2.5mdvmes5.x86_64.rpm
http://www.mandriva.com/en/download/
MandrakeSoft Corporate Server 4.0
-
Mandriva coreutils-5.2.1-8.1.20060mlcs4.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva coreutils-doc-5.2.1-8.1.20060mlcs4.i586.rpm
http://www.mandriva.com/en/download/
Mandriva Linux Mandrake 2009.0 x86_64
-
Mandriva coreutils-6.12-2.5mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva coreutils-doc-6.12-2.5mdv2009.0.x86_64.rpm
http://www.mandriva.com/en/download/
Mandriva Linux Mandrake 2008.0 x86_64
-
Mandriva coreutils-6.9-5.1mdv2008.0.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva coreutils-doc-6.9-5.1mdv2008.0.x86_64.rpm
http://www.mandriva.com/en/download/
MandrakeSoft Enterprise Server 5
-
Mandriva coreutils-6.12-2.5mdvmes5.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva coreutils-doc-6.12-2.5mdvmes5.i586.rpm
http://www.mandriva.com/en/download/
Mandriva Linux Mandrake 2008.0
-
Mandriva coreutils-6.9-5.1mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva coreutils-doc-6.9-5.1mdv2008.0.i586.rpm
http://www.mandriva.com/en/download/
Mandriva Linux Mandrake 2009.1
-
Mandriva coreutils-7.1-2.1mdv2009.1.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva coreutils-doc-7.1-2.1mdv2009.1.i586.rpm
http://www.mandriva.com/en/download/
Mandriva Linux Mandrake 2010.0
-
Mandriva coreutils-7.5-2.1mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/ -
Mandriva coreutils-doc-7.5-2.1mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/
MandrakeSoft Corporate Server 4.0 x86_64
-
Mandriva coreutils-5.2.1-8.1.20060mlcs4.x86_64.rpm
http://www.mandriva.com/en/download/ -
Mandriva coreutils-doc-5.2.1-8.1.20060mlcs4.x86_64.rpm
http://www.mandriva.com/en/download/
References
GNU Coreutils Insecure Temporary File Creation Vulnerability
References:
References:
- Bug 545439 �?? coreutils: Unsafe temporary directory use in "distcheck" rule (Jan Lieskovsky)
- build: distcheck: do not leave a $TMPDIR/coreutils directory behind (Jim Meyering)
- Coreutils Homepage (GNU)
- CVE Request -- coreutils -- unsafe temporary directory location use (Jan Lieskovsky)