SCO X Server World Writeable Permissions Vulnerability

Bugtraq ID:	7027
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Mar 04 2003 12:00AM
Updated:	Mar 04 2003 12:00AM
Credit:	Vulnerability disclosed by the vendor.
Vulnerable:	SCO Unixware 7.1.3 SCO Unixware 7.1.1 SCO Open UNIX 8.0
Not Vulnerable:

SCO X Server World Writeable Permissions Vulnerability

A vulnerability has been reported for X Server on multiple SCO based platforms. Reportedly, on execution the X Server will ignore the existing system umask and install files with world readable and writeable permissions.

An attacker may exploit this vulnerability to deny service, disclose confidential data or obtain elevated privileges on the vulnerable system. This may be done by modifying or replacing the X Server files with arbitrary, attacker-supplied files, or symlinks to existing files.

SCO X Server World Writeable Permissions Vulnerability

There is no exploit code required.

SCO X Server World Writeable Permissions Vulnerability

Solution:
The vendor has provided an advisory(CSSA-2003-SCO.4.1) and fixes to address this issue.


SCO Unixware 7.1.1

• SCO basex711.pkg.Z
  UnixWare 7.1.1
  ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.4.2/basex711.pkg. Z


• SCO xserver711.pkg.Z
  UnixWare 7.1.1
  ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.4.2/xserver711.pk g.Z

SCO Unixware 7.1.3

• SCO basex713.pkg
  UnixWare 7.1.3
  ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.4.2/basex713.pkg


• SCO xserver713.pkg
  UnixWare 7.1.3
  ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.4.2/xserver713.pk g

SCO Open UNIX 8.0

• SCO basex800.pkg
  Open UNIX 8.0.0
  ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.4.2/basex800.pkg


• SCO xserver800.pkg
  Open UNIX 8.0.0
  ftp://ftp.sco.com/pub/updates/UnixWare/CSSA-2003-SCO.4.2/xserver800.pk g

SCO X Server World Writeable Permissions Vulnerability

References: