BRU XBRU Insecure Temporary File Vulnerability
BID:5708
Info
BRU XBRU Insecure Temporary File Vulnerability
| Bugtraq ID: | 5708 |
| Class: | Access Validation Error |
| CVE: |
CVE-2002-1512 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 13 2002 12:00AM |
| Updated: | Jul 11 2009 05:06PM |
| Credit: | Vulnerability discovery credited to <[email protected]>. |
| Vulnerable: |
Tolis Group BRU 17.0 Linux |
| Not Vulnerable: | |
Discussion
BRU XBRU Insecure Temporary File Vulnerability
BRU is a backup and restore utility distributed by The Tolis Group. This problem affects the utility on the Linux platform.
xbru does not properly check for the existence of temporary files prior to execution. Because of this, it is possible for a local user to create symbolic links to other files, which will be overwritten by the BRU user. As BRU is typically run by the root user, this could result in the overwriting of root-owned files.
BRU is a backup and restore utility distributed by The Tolis Group. This problem affects the utility on the Linux platform.
xbru does not properly check for the existence of temporary files prior to execution. Because of this, it is possible for a local user to create symbolic links to other files, which will be overwritten by the BRU user. As BRU is typically run by the root user, this could result in the overwriting of root-owned files.
References
BRU XBRU Insecure Temporary File Vulnerability
References:
References: