Installatron Plugin for DirectAdmin Insecure Temporary File Creation Vulnerability

Bugtraq ID:	63911
Class:	Race Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Nov 25 2013 12:00AM
Updated:	Nov 27 2013 12:25AM
Credit:	Rack911
Vulnerable:
Not Vulnerable:

Installatron Plugin for DirectAdmin Insecure Temporary File Creation Vulnerability

Installatron Plugin for DirectAdmin is prone to an insecure temporary file-creation vulnerability because they create temporary files in an insecure manner.

An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. which leads to denial-of-service conditions.

Installatron Plugin 9.0.5 is vulnerable; other versions may also be affected.

Installatron Plugin for DirectAdmin Insecure Temporary File Creation Vulnerability

An attacker can use readily available commands to exploit this issue.

Installatron Plugin for DirectAdmin Insecure Temporary File Creation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Installatron Plugin for DirectAdmin Insecure Temporary File Creation Vulnerability

References: