pimd Multiple Insecure Temporary File Creation Vulnerabilities

Bugtraq ID:	45715
Class:	Design Error
CVE:	CVE-2011-0007
Remote:	No
Local:	Yes
Published:	Jan 07 2011 12:00AM
Updated:	Dec 19 2014 12:56AM
Credit:	Unknown
Vulnerable:	Joachim Nilsson pimd 2.1.5 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:

pimd Multiple Insecure Temporary File Creation Vulnerabilities

pimd creates multiple temporary files in an insecure manner.

An attacker with local access could potentially exploit these issues to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application and perform certain actions with escalated privileges.

pimd 2.1.5 is vulnerable; other versions may also be affected.

pimd Multiple Insecure Temporary File Creation Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

pimd Multiple Insecure Temporary File Creation Vulnerabilities

References:

• CVE Request - pimd - Insecure file creation in /var/tmp (Openwall Project)
  
• pimd Homepage (Joachim Nilsson)