SuSE AAA_Base_Clean_Core Script RM Race Condition Vulnerability
BID:4758
Info
SuSE AAA_Base_Clean_Core Script RM Race Condition Vulnerability
| Bugtraq ID: | 4758 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | May 16 2002 12:00AM |
| Updated: | May 16 2002 12:00AM |
| Credit: | Vulnerability discovery credited to Paul Starzetz <[email protected]>. |
| Vulnerable: |
SuSE Linux 7.3 sparc SuSE Linux 7.3 ppc SuSE Linux 7.3 i386 SuSE Linux 7.2 i386 SuSE Linux 7.1 x86 SuSE Linux 7.1 sparc SuSE Linux 7.1 ppc SuSE Linux 7.1 alpha SuSE Linux 7.0 sparc SuSE Linux 7.0 ppc SuSE Linux 7.0 i386 SuSE Linux 7.0 alpha SuSE Linux 6.4 ppc SuSE Linux 6.4 i386 SuSE Linux 6.4 alpha |
| Not Vulnerable: | |
Discussion
SuSE AAA_Base_Clean_Core Script RM Race Condition Vulnerability
SuSE Linux is a freely available, open source operating system. It is maintained by SuSE.
A user could create a deeply nested directory structure that would be descended by the recursive rm command, executed by the aaa_base_clean_core script daily. Upon descent into this directory tree, a user could move the current working directory of the process higher in the directory structure, causing the rm process to ascend higher than intended and remove system files, including the root directory.
SuSE Linux is a freely available, open source operating system. It is maintained by SuSE.
A user could create a deeply nested directory structure that would be descended by the recursive rm command, executed by the aaa_base_clean_core script daily. Upon descent into this directory tree, a user could move the current working directory of the process higher in the directory structure, causing the rm process to ascend higher than intended and remove system files, including the root directory.
Exploit / POC
SuSE AAA_Base_Clean_Core Script RM Race Condition Vulnerability
No exploit code is required for this vulnerability.
No exploit code is required for this vulnerability.
Solution / Fix
SuSE AAA_Base_Clean_Core Script RM Race Condition Vulnerability
Solution:
Fixes available:
SuSE Linux 6.4 ppc
SuSE Linux 6.4 alpha
SuSE Linux 6.4 i386
SuSE Linux 7.0 alpha
SuSE Linux 7.0 i386
SuSE Linux 7.0 sparc
SuSE Linux 7.0 ppc
SuSE Linux 7.1 x86
SuSE Linux 7.1 sparc
SuSE Linux 7.1 alpha
SuSE Linux 7.1 ppc
SuSE Linux 7.2 i386
SuSE Linux 7.3 sparc
SuSE Linux 7.3 ppc
SuSE Linux 7.3 i386
Solution:
Fixes available:
SuSE Linux 6.4 ppc
-
SuSE fileutil-4.0-195.ppc.rpm
ftp://ftp.suse.com/pub/suse/ppc/update/6.4/a1/fileutil-4.0-195.ppc.rpm
SuSE Linux 6.4 alpha
-
SuSE fileutil-4.0-80.alpha.rpm
ftp://ftp.suse.com/pub/suse/axp/update/6.4/a1/fileutil-4.0-80.alpha.rp m
SuSE Linux 6.4 i386
-
SuSE fileutil-4.0-175.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/6.4/a1/fileutil-4.0-175.i386.r pm
SuSE Linux 7.0 alpha
-
SuSE fileutil-4.0-81.alpha.rpm
ftp://ftp.suse.com/pub/suse/axp/update/7.0/a1/fileutil-4.0-81.alpha.rp m
SuSE Linux 7.0 i386
-
SuSE fileutil-4.0-177.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.0/a1/fileutil-4.0-177.i386.r pm
SuSE Linux 7.0 sparc
-
SuSE fileutil-4.0-4.sparc.rpm
ftp://ftp.suse.com/pub/suse/sparc/update/7.0/a1/fileutil-4.0-4.sparc.r pm -
SuSE fileutils-4.0.35-26.sparc.rpm
ftp://ftp.suse.com/pub/suse/sparc/update/7.1/a1/fileutils-4.0.35-26.sp arc.rpm
SuSE Linux 7.0 ppc
-
SuSE fileutil-4.0-196.ppc.rpm
ftp://ftp.suse.com/pub/suse/ppc/update/7.0/a1/fileutil-4.0-196.ppc.rpm
SuSE Linux 7.1 x86
-
SuSE fileutils-4.0.35-66.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.1/a1/fileutils-4.0.35-66.i38 6.rpm
SuSE Linux 7.1 sparc
-
SuSE fileutils-4.0.35-26.sparc.rpm
ftp://ftp.suse.com/pub/suse/sparc/update/7.1/a1/fileutils-4.0.35-26.sp arc.rpm
SuSE Linux 7.1 alpha
-
SuSE fileutils-4.0.35-31.alpha.rpm
ftp://ftp.suse.com/pub/suse/axp/update/7.1/a1/fileutils-4.0.35-31.alph a.rpm
SuSE Linux 7.1 ppc
-
SuSE fileutils-4.0.35-32.ppc.rpm
ftp://ftp.suse.com/pub/suse/ppc/update/7.1/a1/fileutils-4.0.35-32.ppc. rpm
SuSE Linux 7.2 i386
-
SuSE fileutils-4.0.35-67.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.2/a1/fileutils-4.0.35-67.i38 6.rpm
SuSE Linux 7.3 sparc
-
SuSE fileutils-4.1-68.sparc.rpm
ftp://ftp.suse.com/pub/suse/sparc/update/7.3/a1/fileutils-4.1-68.sparc .rpm
SuSE Linux 7.3 ppc
-
SuSE fileutils-4.1-111.ppc.rpm
ftp://ftp.suse.com/pub/suse/ppc/update/7.3/a1/fileutils-4.1-111.ppc.rp m
SuSE Linux 7.3 i386
-
SuSE fileutils-4.1-154.i386.rpm
ftp://ftp.suse.com/pub/suse/i386/update/7.3/a1/fileutils-4.1-154.i386. rpm
References
SuSE AAA_Base_Clean_Core Script RM Race Condition Vulnerability
References:
References: