Tmpwatch Race Condition Vulnerability

Bugtraq ID:	6453
Class:	Race Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Dec 20 2002 12:00AM
Updated:	Dec 20 2002 12:00AM
Credit:	Discovered by Michal Zalewski <[email protected]>.
Vulnerable:	Erik Troan tmpwatch 2.8.4 + Redhat Linux 8.0 i386 + Redhat Linux 8.0 Erik Troan tmpwatch 2.8.3 + Redhat Linux 7.3 i386 + Redhat Linux 7.3 Erik Troan tmpwatch 2.8.1 Erik Troan tmpwatch 2.8 + Redhat Linux 7.2 ia64 + Redhat Linux 7.2 i386 + Redhat Linux 7.2 alpha + Redhat Linux 7.2 Erik Troan tmpwatch 2.7.1 + Redhat Linux 7.1 ia64 + Redhat Linux 7.1 i386 + Redhat Linux 7.1 alpha + Redhat Linux 7.1
Not Vulnerable:

Tmpwatch Race Condition Vulnerability

It has been reported that a potentially exploitable race condition is present in tmpwatch. The flaw occurs when tmpwatch is deleting a temporary file. Theoretically, this can be an exploitable condition for malicious local users.

Tmpwatch Race Condition Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Tmpwatch Race Condition Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Tmpwatch Race Condition Vulnerability

References:

• [RAZOR] Problems with mkstemp() (Michal Zalewski )