bzexe '/tmp/$prog' Insecure Temporary File Creation Privilege Escalation Vulnerability

Bugtraq ID:	50409
Class:	Race Condition Error
CVE:	CVE-2011-4089
Remote:	No
Local:	Yes
Published:	Oct 28 2011 12:00AM
Updated:	Dec 14 2011 11:48PM
Credit:	vladz
Vulnerable:	Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.10 powerpc Ubuntu Ubuntu Linux 10.10 i386 Ubuntu Ubuntu Linux 10.10 ARM Ubuntu Ubuntu Linux 10.10 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 bzexe bzexe 0
Not Vulnerable:

bzexe '/tmp/$prog' Insecure Temporary File Creation Privilege Escalation Vulnerability

bzexe is prone to a vulnerability because it creates temporary files in an insecure manner.

An attacker with local access could potentially exploit this issue to execute arbitrary code with root privileges.

bzexe '/tmp/$prog' Insecure Temporary File Creation Privilege Escalation Vulnerability

An attacker can use readily available commands to exploit this issue.

The following exploit is available:

• /data/vulnerabilities/exploits/50409.c

bzexe '/tmp/$prog' Insecure Temporary File Creation Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for more information.

bzexe '/tmp/$prog' Insecure Temporary File Creation Privilege Escalation Vulnerability

References:

• bzexe Homepage (bzexe)
  
• insecure temporary file creation (bzexe) (vladz)
  
• Request for CVE Identifier: bzexe insecure temporary file (bzexe)