rpi-update Insecure Temporary File Handling and Security Bypass Vulnerabilities

Bugtraq ID:	58292
Class:	Design Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Feb 28 2013 12:00AM
Updated:	Mar 06 2013 06:04AM
Credit:	Technion
Vulnerable:
Not Vulnerable:

rpi-update Insecure Temporary File Handling and Security Bypass Vulnerabilities

rpi-update is prone to an insecure temporary file-handling vulnerability and a security-bypass vulnerability

An attacker can exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application, bypass certain security restrictions, and perform unauthorized actions. This may aid in further attacks.

rpi-update Insecure Temporary File Handling and Security Bypass Vulnerabilities

An attacker can exploit these issues through standard tools and commands. Attackers require local interactive access to exploit insecure temporary file-handling vulnerability.

The following example exploit code is available:

• /data/vulnerabilities/exploits/58292.c

rpi-update Insecure Temporary File Handling and Security Bypass Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

rpi-update Insecure Temporary File Handling and Security Bypass Vulnerabilities

References: