PEAR Installer Multiple Insecure Temporary File Creation Vulnerabilities
BID:47650
Info
PEAR Installer Multiple Insecure Temporary File Creation Vulnerabilities
| Bugtraq ID: | 47650 |
| Class: | Race Condition Error |
| CVE: |
CVE-2011-1144 |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 29 2011 12:00AM |
| Updated: | Dec 19 2014 12:56AM |
| Credit: | ondrej |
| Vulnerable: |
Ubuntu Ubuntu Linux 9.10 sparc Ubuntu Ubuntu Linux 9.10 powerpc Ubuntu Ubuntu Linux 9.10 lpia Ubuntu Ubuntu Linux 9.10 i386 Ubuntu Ubuntu Linux 9.10 ARM Ubuntu Ubuntu Linux 9.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 PEAR PEAR 1.9.2 PEAR PEAR 1.9.1 PEAR PEAR 1.5.4 PEAR PEAR 1.5.3 PEAR PEAR 1.4.3 PEAR PEAR 1.4.2 PEAR PEAR 1.4.1 PEAR PEAR 1.4 PEAR PEAR 1.1.14 PEAR PEAR 1.2.0b2 PEAR PEAR 1.0 Gentoo Linux |
| Not Vulnerable: | |
Discussion
PEAR Installer Multiple Insecure Temporary File Creation Vulnerabilities
PEAR creates temporary files in an insecure manner.
An attacker with local access could potentially exploit these issues to perform symbolic-link attacks.
Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.
PEAR 1.9.2 is vulnerable; other versions may also be affected.
PEAR creates temporary files in an insecure manner.
An attacker with local access could potentially exploit these issues to perform symbolic-link attacks.
Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.
PEAR 1.9.2 is vulnerable; other versions may also be affected.
Exploit / POC
PEAR Installer Multiple Insecure Temporary File Creation Vulnerabilities
An attacker uses readily available commands to exploit these issues.
An attacker uses readily available commands to exploit these issues.
Solution / Fix
PEAR Installer Multiple Insecure Temporary File Creation Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
PEAR Installer Multiple Insecure Temporary File Creation Vulnerabilities
References:
References:
- Bug #18056 [SECURITY]: Symlink attack in PEAR install (PEAR)
- PEAR Homepage (The PHP Group)