Linux Mint 'mintUpdate' Insecure Temporary File Creation Vulnerability

Bugtraq ID:	40296
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	May 19 2010 12:00AM
Updated:	May 19 2010 12:00AM
Credit:	L4teral
Vulnerable:	Linux Mint Linux Mint 8
Not Vulnerable:	Linux Mint Linux Mint 9

Linux Mint 'mintUpdate' Insecure Temporary File Creation Vulnerability

The LinuxMint update tool creates temporary files in an insecure manner.

An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application.

Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.

Linux Mint 'mintUpdate' Insecure Temporary File Creation Vulnerability

An attacker can use readily available commands to exploit this issue.

Linux Mint 'mintUpdate' Insecure Temporary File Creation Vulnerability

Solution:
Updates are available. Please see the references for more details.


Linux Mint Linux Mint 8

• Linux Mint Linux Mint Security fix - temp file created in unsecure way
  http://github.com/linuxmint/mintupdate/commit/301993906c694eb119cd9614 817de57e7b0c874c


• Linux Mint Linux Mint 9 Download
  http://www.linuxmint.com/download.php

Linux Mint 'mintUpdate' Insecure Temporary File Creation Vulnerability

References:

• Linux Mint Homepage (Linux Mint)