MATLAB Mex Insecure Temporary Files Vulnerability
BID:6469
Info
MATLAB Mex Insecure Temporary Files Vulnerability
| Bugtraq ID: | 6469 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 23 2002 12:00AM |
| Updated: | Dec 23 2002 12:00AM |
| Credit: | Discovery of this issue is credited to Paul Szabo <[email protected]>. |
| Vulnerable: |
MathWorks MATLAB 6.5 |
| Not Vulnerable: | |
Discussion
MATLAB Mex Insecure Temporary Files Vulnerability
The MATLAB Mex script is prone to an issue which may allow local attackers to corrupt files.
MATLAB uses the process ID (PID) when naming temporary files. If an attacker can anticipate the name of temporary files created by Mex, then the attacker can place a malicious symbolic link in place of the temporary files. If the symbolic link points to a file which is writeable by the MATLAB user, then they will be corrupted when the Mex script performs any actions on temporary files.
The MATLAB Mex script is prone to an issue which may allow local attackers to corrupt files.
MATLAB uses the process ID (PID) when naming temporary files. If an attacker can anticipate the name of temporary files created by Mex, then the attacker can place a malicious symbolic link in place of the temporary files. If the symbolic link points to a file which is writeable by the MATLAB user, then they will be corrupted when the Mex script performs any actions on temporary files.
Exploit / POC
MATLAB Mex Insecure Temporary Files Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
MATLAB Mex Insecure Temporary Files Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.