Oracle Solaris Management Console WBEM Insecure Temporary File Creation Vulnerability

Bugtraq ID:	41642
Class:	Design Error
CVE:	CVE-2010-2384
Remote:	No
Local:	Yes
Published:	Jul 13 2010 12:00AM
Updated:	Jul 20 2010 05:26PM
Credit:	Frank Stuart
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 10_x86 Sun Solaris 10_sparc
Not Vulnerable:

Oracle Solaris Management Console WBEM Insecure Temporary File Creation Vulnerability

The 'Solaris Management Console' sub component of Oracle Solaris creates temporary files in an insecure manner.

An attacker with local access can exploit this issue to overwrite arbitrary files. This may result in denial-of-service conditions or could aid in other attacks.

Solaris 9 and 10 are affected.

Oracle Solaris Management Console WBEM Insecure Temporary File Creation Vulnerability

Attackers can use readily available command line tools to exploit this issue.

The following example is available:

• /data/vulnerabilities/exploits/41642.sh

Oracle Solaris Management Console WBEM Insecure Temporary File Creation Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

Oracle Solaris Management Console WBEM Insecure Temporary File Creation Vulnerability

References:

• CVE-2010-2384: Solaris wbem unsafe use of temporary files (Frank Stuart (fstuart fstuart com))
  
• Oracle Critical Patch Update Advisory - July 2010 (Oracle)