Hammerhead '/tmp/hammer.log' Insecure Temporary File Creation Vulnerability

Bugtraq ID:	49548
Class:	Design Error
CVE:	CVE-2011-3204
Remote:	No
Local:	Yes
Published:	Sep 09 2011 12:00AM
Updated:	Sep 09 2011 12:00AM
Credit:	Jamie Strandboge
Vulnerable:	SourceForge Hammerhead 2.1.4
Not Vulnerable:

Hammerhead '/tmp/hammer.log' Insecure Temporary File Creation Vulnerability

Hammerhead is prone to an insecure temporary-file-creation vulnerability.

Successfully exploiting the temporary-file-creation issue allows an attacker to overwrite arbitrary files and to perform symbolic-link attacks in the context of the affected application. Other attacks may also be possible.

Hammerhead 2.1.4 is vulnerable; other versions may also be affected.

Hammerhead '/tmp/hammer.log' Insecure Temporary File Creation Vulnerability

An attacker can use readily available commands to launch attacks.

Hammerhead '/tmp/hammer.log' Insecure Temporary File Creation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Hammerhead '/tmp/hammer.log' Insecure Temporary File Creation Vulnerability

References:

• Hammerhead download page (Sourceforge)
  
• insecure temporary file use (daveb)
  
• Security issue in hammerhead (Josh Bressers)
  
• Security issue in hammerhead (Jamie Strandboge)