AIX sccsdiff Insecure Temporary File Creation Vulnerability

Bugtraq ID:	432
Class:	Origin Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Jun 30 1998 12:00AM
Updated:	Jun 30 1998 12:00AM
Credit:	This vulnerability was published to the IBM APAR Database on June 30, 1998. The SecurityFocus Database entry for this problem is based wholly off that information.
Vulnerable:	IBM AIX 4.3 IBM AIX 4.2.1 IBM AIX 4.2 IBM AIX 4.1.5 IBM AIX 4.1.4 IBM AIX 4.1.3 IBM AIX 4.1.2 IBM AIX 4.1.1 IBM AIX 4.1
Not Vulnerable:	IBM AIX 4.3.2

AIX sccsdiff Insecure Temporary File Creation Vulnerability

The sccsdiff script under certain versions of AIX creates insecure non-random te mporary files. This allows malicious users to symlink to these files and overwrite other system files at the privilege level of the user executing the program. Typically this privilege level is root.

AIX sccsdiff Insecure Temporary File Creation Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

AIX sccsdiff Insecure Temporary File Creation Vulnerability

Solution:
IBM has released the following APAR'S to address this problem:

AIX 4.3
---------
APAR # IX79682

AIX 4.2
----------
APAR # IX81369

AIX 4.1
---------
APAR # IX80163

AIX sccsdiff Insecure Temporary File Creation Vulnerability

References:

• AIX Fix Distribution Service (IBM)
  
• IBM Support Databases (IBM)