OpenFabrics Enterprise Distribution 'openibd' Insecure Temporary File Creation Vulnerability

Bugtraq ID:	44332
Class:	Design Error
CVE:	CVE-2010-1693
Remote:	No
Local:	Yes
Published:	Oct 22 2010 12:00AM
Updated:	Oct 22 2010 12:00AM
Credit:	Dale Talcott from NASA Ames
Vulnerable:	OpenFabrics Alliance OpenFabrics Enterprise Distribution (OFED) 1.5.2
Not Vulnerable:

OpenFabrics Enterprise Distribution 'openibd' Insecure Temporary File Creation Vulnerability

OpenFabrics Enterprise Distribution creates temporary files in an insecure manner.

An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application and to perform certain actions with escalated privileges.

Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.

OpenFabrics Enterprise Distribution 1.5.2 is vulnerable; other versions may also be affected.

OpenFabrics Enterprise Distribution 'openibd' Insecure Temporary File Creation Vulnerability

An attacker uses readily available commands to exploit this issue.

OpenFabrics Enterprise Distribution 'openibd' Insecure Temporary File Creation Vulnerability

Solution:
Updates are available. Please see the reference for more details.

OpenFabrics Enterprise Distribution 'openibd' Insecure Temporary File Creation Vulnerability

References:

• Product Page (OpenFabrics Alliance)
  
• [ewg] [PATCH] security fix in openibd script (Jay Lan)