feh utils.c Predictable Filename Local Privilege Escalation Vulnerability

Bugtraq ID:	50128
Class:	Design Error
CVE:	CVE-2011-1031
Remote:	No
Local:	Yes
Published:	Feb 07 2011 12:00AM
Updated:	May 07 2015 05:07PM
Credit:	segooon
Vulnerable:	Gentoo Linux derf feh 1.11.2 derf feh 1.11.1
Not Vulnerable:

feh utils.c Predictable Filename Local Privilege Escalation Vulnerability

feh is prone to a local privilege-escalation vulnerability.

An attacker can exploit this issue to overwrite arbitrary files. This will allow the attacker to fully compromise the affected machine.

feh 1.11.2 and prior versions are vulnerable.

NOTE: This issue is related to BID 46182 (feh 'feh_unique_filename()' Predictable Filename Local Privilege Escalation Vulnerability).

feh utils.c Predictable Filename Local Privilege Escalation Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

feh utils.c Predictable Filename Local Privilege Escalation Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

feh utils.c Predictable Filename Local Privilege Escalation Vulnerability

References:

• feh Homepage (The Tom Gilbert Blog)
  
• vulnerability: rewrite arbitrary user file (Bug #607328 )