RubyGems gyazo 'gyazo/client.rb' Insecure Temporary File Creation Vulnerability

Bugtraq ID:	68737
Class:	Design Error
CVE:	CVE-2014-4994
Remote:	No
Local:	Yes
Published:	Jun 01 2014 12:00AM
Updated:	Jun 01 2014 12:00AM
Credit:	Larry W. Cashdollar
Vulnerable:	Toshiyuki Masui gyazo 1.0.0
Not Vulnerable:

RubyGems gyazo 'gyazo/client.rb' Insecure Temporary File Creation Vulnerability

gyazo creates a temporary file in an insecure manner.

An attacker with local access could perform symbolic-link attacks, overwriting arbitrary files or execute HTML scripts in the context of the affected application.

Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files, which may result in a denial of service. Other attacks may also be possible.

gyazo 1.0.0 is vulnerable; other versions are also affected.

RubyGems gyazo 'gyazo/client.rb' Insecure Temporary File Creation Vulnerability

An attacker uses readily available commands to launch attacks.

RubyGems gyazo 'gyazo/client.rb' Insecure Temporary File Creation Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

RubyGems gyazo 'gyazo/client.rb' Insecure Temporary File Creation Vulnerability

References:

• gyazo Product Page (Toshiyuki Masui)
  
• Re: Vulnerability Report for Ruby Gem codders-dataset-1.3.2.1 (etc.) (oss-sec)
  
• Title: Vulnerability Report for Ruby Gem gyazo-1.0.0 (Larry W. Cashdollar)