RedHat Linux printfilter Vulnerability
BID:390
Info
RedHat Linux printfilter Vulnerability
| Bugtraq ID: | 390 |
| Class: | Origin Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 13 1998 12:00AM |
| Updated: | Sep 13 1998 12:00AM |
| Credit: | First posted to BugTraq by base16 <[email protected]> on September 13, 1998. Explanatory followup posted by Pavel Kankovsky <[email protected]> on September 14, 1998. |
| Vulnerable: |
Redhat Linux 5.2 i386 Redhat Linux 5.1 Redhat Linux 5.0 |
| Not Vulnerable: |
Redhat Linux 6.0 |
Discussion
RedHat Linux printfilter Vulnerability
The RedHat printfilter contains the following lines in it's script:
if [ ${i##*:} = "DONE" ]; then
if [ "$DEBUG_FILTER" != "" ]; then
echo "$root -> depth = $depth" >> /tmp/filter.debug
fi
This will follow symbolic links.
This vulnerability only exists if DEBUG_FILTER is set to something (which it is not by default).
The RedHat printfilter contains the following lines in it's script:
if [ ${i##*:} = "DONE" ]; then
if [ "$DEBUG_FILTER" != "" ]; then
echo "$root -> depth = $depth" >> /tmp/filter.debug
fi
This will follow symbolic links.
This vulnerability only exists if DEBUG_FILTER is set to something (which it is not by default).
Exploit / POC
RedHat Linux printfilter Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
RedHat Linux printfilter Vulnerability
Solution:
Make sure DEBUG_FILTER is always set to "".
Solution:
Make sure DEBUG_FILTER is always set to "".
References
RedHat Linux printfilter Vulnerability
References:
References: