AIX acledit & aclput Race Condition Vulnerability

Bugtraq ID:	429
Class:	Race Condition Error
CVE:	CVE-1999-1480
Remote:	No
Local:	Yes
Published:	Jun 11 1998 12:00AM
Updated:	Jul 11 2009 12:56AM
Credit:	This vulnerability was published to the IBM APAR Database on June 11, 1998. The SecurityFocus Database entry for this problem is based wholly off that information.
Vulnerable:	IBM AIX 4.3
Not Vulnerable:	IBM AIX 4.3.2

AIX acledit & aclput Race Condition Vulnerability

Acledit and aclput under some versions of AIX use mktemp() to create temporary files in /tmp. The files created are non-random and have insecure permissions. Malicious users may be able to exploit a race condition and create or modify files owned by the invoker.

AIX acledit & aclput Race Condition Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

AIX acledit & aclput Race Condition Vulnerability

Solution:
IBM has released the following APAR'S to address this problem:

AIX 4.3
---------
APAR # IX79139

AIX acledit & aclput Race Condition Vulnerability

References:

• AIX Fix Distribution Service (IBM)
  
• IBM Support Databases (IBM)