Multiple Temporary File Monitoring Utility Vendor Stopped Process Vulnerabilities
BID:6451
Info
Multiple Temporary File Monitoring Utility Vendor Stopped Process Vulnerabilities
| Bugtraq ID: | 6451 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 20 2002 12:00AM |
| Updated: | Dec 20 2002 12:00AM |
| Credit: | Discovered by Michal Zalewski <[email protected]>. |
| Vulnerable: |
Stanislav Shalunov stmpclean 0.1 Erik Troan tmpwatch 2.8.4 Erik Troan tmpwatch 2.8.3 Erik Troan tmpwatch 2.8.1 Erik Troan tmpwatch 2.8 |
| Not Vulnerable: | |
Discussion
Multiple Temporary File Monitoring Utility Vendor Stopped Process Vulnerabilities
Temporary file monitoring and cleaning utilities are commonplace on many UNIX systems. Popular tools are 'tmpwatch' and 'stmpclean'. A weakness in the design of these tools has recently been published. During operation, some of these utilities delete temporary files that have not been accessed for a pre-specified amount of time. Under certain circumstances, the removal of a process' temporary file may create exploitable conditions.
Temporary file monitoring and cleaning utilities are commonplace on many UNIX systems. Popular tools are 'tmpwatch' and 'stmpclean'. A weakness in the design of these tools has recently been published. During operation, some of these utilities delete temporary files that have not been accessed for a pre-specified amount of time. Under certain circumstances, the removal of a process' temporary file may create exploitable conditions.
Exploit / POC
Multiple Temporary File Monitoring Utility Vendor Stopped Process Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Multiple Temporary File Monitoring Utility Vendor Stopped Process Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Multiple Temporary File Monitoring Utility Vendor Stopped Process Vulnerabilities
References:
References:
- [RAZOR] Problems with mkstemp() (Michal Zalewski