Gaim Sensitive World Readable Temporary File Vulnerability
BID:4730
Info
Gaim Sensitive World Readable Temporary File Vulnerability
| Bugtraq ID: | 4730 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | May 13 2002 12:00AM |
| Updated: | May 13 2002 12:00AM |
| Credit: | Discovered by Scott Mackenzie <[email protected]>. |
| Vulnerable: |
Rob Flynn Gaim 0.57 Rob Flynn Gaim 0.56 |
| Not Vulnerable: |
Rob Flynn Gaim 0.59 Rob Flynn Gaim 0.58 |
Discussion
Gaim Sensitive World Readable Temporary File Vulnerability
Gaim is a chat client which supports AOL Instant Messenger, ICQ, MSN Instant Messenger, Yahoo Instant Messenger, Jabber and IRC. Gaim runs on a number of Unix-based platforms, including Linux.
When Gaim is used to check web mail on startup, world readable files are created in /tmp. Under some circumstances, these files may contain sensitive information, including authentication credentials.
It has been reported that it is possible to gain access to Hotmail accounts through information contained in these files. Other web mail services may also be vulnerable, although this has not been confirmed.
Gaim is a chat client which supports AOL Instant Messenger, ICQ, MSN Instant Messenger, Yahoo Instant Messenger, Jabber and IRC. Gaim runs on a number of Unix-based platforms, including Linux.
When Gaim is used to check web mail on startup, world readable files are created in /tmp. Under some circumstances, these files may contain sensitive information, including authentication credentials.
It has been reported that it is possible to gain access to Hotmail accounts through information contained in these files. Other web mail services may also be vulnerable, although this has not been confirmed.
Exploit / POC
Gaim Sensitive World Readable Temporary File Vulnerability
No exploit code required.
No exploit code required.
Solution / Fix
Gaim Sensitive World Readable Temporary File Vulnerability
Solution:
The vendor has addressed this issue in versions 0.58 and later.
Fixes are available:
Rob Flynn Gaim 0.56
Rob Flynn Gaim 0.57
Solution:
The vendor has addressed this issue in versions 0.58 and later.
Fixes are available:
Rob Flynn Gaim 0.56
-
Rob Flynn gaim-0.59.tar.gz
http://prdownloads.sourceforge.net/gaim/gaim-0.59.tar.gz
Rob Flynn Gaim 0.57
-
Red Hat gaim-0.59-0.7.0.alpha.rpm
ftp://updates.redhat.com/7.0/en/powertools/alpha/gaim-0.59-0.7.0.alpha .rpm -
Red Hat gaim-0.59-0.7.0.i386.rpm
ftp://updates.redhat.com/7.0/en/powertools/i386/gaim-0.59-0.7.0.i386.r pm -
Red Hat gaim-0.59-0.7.0.src.rpm
Source RPM.
ftp://updates.redhat.com/7.0/en/powertools/SRPMS/gaim-0.59-0.7.0.src.r pm -
Red Hat gaim-0.59-0.7.1.alpha.rpm
ftp://updates.redhat.com/7.1/en/os/alpha/gaim-0.59-0.7.1.alpha.rpm -
Red Hat gaim-0.59-0.7.1.i386.rpm
ftp://updates.redhat.com/7.1/en/os/i386/gaim-0.59-0.7.1.i386.rpm -
Red Hat gaim-0.59-0.7.1.ia64.rpm
ftp://updates.redhat.com/7.1/en/os/ia64/gaim-0.59-0.7.1.ia64.rpm -
Red Hat gaim-0.59-0.7.1.src.rpm
Source RPM.
ftp://updates.redhat.com/7.1/en/os/SRPMS/gaim-0.59-0.7.1.src.rpm -
Red Hat gaim-0.59-0.7.2.i386.rpm
ftp://updates.redhat.com/7.2/en/os/i386/gaim-0.59-0.7.2.i386.rpm -
Red Hat gaim-0.59-0.7.2.ia64.rpm
ftp://updates.redhat.com/7.2/en/os/ia64/gaim-0.59-0.7.2.ia64.rpm -
Red Hat gaim-0.59-0.7.2.src.rpm
Source RPM.
ftp://updates.redhat.com/7.2/en/os/SRPMS/gaim-0.59-0.7.2.src.rpm -
Red Hat gaim-0.59-0.7.3.i386.rpm
ftp://updates.redhat.com/7.3/en/os/i386/gaim-0.59-0.7.3.i386.rpm -
Red Hat gaim-0.59-0.7.3.src.rpm
Source RPM.
ftp://updates.redhat.com/7.3/en/os/SRPMS/gaim-0.59-0.7.3.src.rpm -
Rob Flynn gaim-0.59.tar.gz
http://prdownloads.sourceforge.net/gaim/gaim-0.59.tar.gz