SKK/DDSKK Insecure Temporary Files Vulnerability
BID:8144
Info
SKK/DDSKK Insecure Temporary Files Vulnerability
| Bugtraq ID: | 8144 |
| Class: | Design Error |
| CVE: |
CVE-2003-0539 |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 09 2003 12:00AM |
| Updated: | Mar 19 2015 08:37AM |
| Credit: | This issue was reported in a Debian advisory. |
| Vulnerable: |
skk skk 10.62 a RedHat ddskk-xemacs-11.6.0-8.noarch.rpm RedHat ddskk-xemacs-11.6.0-6.noarch.rpm RedHat ddskk-xemacs-11.6.0-10.noarch.rpm RedHat ddskk-11.6.0-8.noarch.rpm RedHat ddskk-11.6.0-6.noarch.rpm RedHat ddskk-11.6.0-10.noarch.rpm RedHat ddskk-11.3.20010617-2.noarch.rpm RedHat ddskk-11.3.20010225-5.noarch.rpm ddskk ddskk 11.6 .rel.0 |
| Not Vulnerable: | |
Discussion
SKK/DDSKK Insecure Temporary Files Vulnerability
skk and ddskk do not create temporary files in a secure manner. This could permit local attackers to mount file corruption attacks against sensitive or critical files owned by other users.
skk and ddskk do not create temporary files in a secure manner. This could permit local attackers to mount file corruption attacks against sensitive or critical files owned by other users.
Exploit / POC
SKK/DDSKK Insecure Temporary Files Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
SKK/DDSKK Insecure Temporary Files Vulnerability
Solution:
Red Hat Linux has released an advisory (RHSA-2003:241-01) that addresses this issue. Please see the referenced advisory for details on obtaining and applying fixes.
Debian has released an advisory (DSA 343-1) that addresses this issue. Please see the attached advisory for details on obtaining and applying fixes.
Redhat ddskk-11.3.20010225-5.noarch.rpm
Redhat ddskk-11.6.0-8.noarch.rpm
Redhat ddskk-11.3.20010617-2.noarch.rpm
Redhat ddskk-11.6.0-6.noarch.rpm
Redhat ddskk-xemacs-11.6.0-8.noarch.rpm
Redhat ddskk-xemacs-11.6.0-6.noarch.rpm
Redhat ddskk-xemacs-11.6.0-10.noarch.rpm
Redhat ddskk-11.6.0-10.noarch.rpm
skk skk 10.62 a
ddskk ddskk 11.6 .rel.0
Solution:
Red Hat Linux has released an advisory (RHSA-2003:241-01) that addresses this issue. Please see the referenced advisory for details on obtaining and applying fixes.
Debian has released an advisory (DSA 343-1) that addresses this issue. Please see the attached advisory for details on obtaining and applying fixes.
Redhat ddskk-11.3.20010225-5.noarch.rpm
-
Red Hat ddskk-11.6.0-1.7.noarch.rpm
ftp://updates.redhat.com/7.1/en/os/noarch/ddskk-11.6.0-1.7.noarch.rpm
Redhat ddskk-11.6.0-8.noarch.rpm
-
Red Hat ddskk-11.6.0-11.80.noarch.rpm
ftp://updates.redhat.com/8.0/en/os/noarch/ddskk-11.6.0-11.80.noarch.rp m
Redhat ddskk-11.3.20010617-2.noarch.rpm
-
Red Hat ddskk-11.6.0-1.7.noarch.rpm
ftp://updates.redhat.com/7.2/en/os/noarch/ddskk-11.6.0-1.7.noarch.rpm
Redhat ddskk-11.6.0-6.noarch.rpm
-
Red Hat ddskk-11.6.0-11.73.noarch.rpm
ftp://updates.redhat.com/7.3/en/os/noarch/ddskk-11.6.0-11.73.noarch.rp m
Redhat ddskk-xemacs-11.6.0-8.noarch.rpm
-
Red Hat ddskk-xemacs-11.6.0-11.80.noarch.rpm
ftp://updates.redhat.com/8.0/en/os/noarch/ddskk-xemacs-11.6.0-11.80.no arch.rpm
Redhat ddskk-xemacs-11.6.0-6.noarch.rpm
-
Red Hat ddskk-xemacs-11.6.0-11.73.noarch.rpm
ftp://updates.redhat.com/7.3/en/os/noarch/ddskk-xemacs-11.6.0-11.73.no arch.rpm
Redhat ddskk-xemacs-11.6.0-10.noarch.rpm
-
Red Hat ddskk-xemacs-11.6.0-11.90.noarch.rpm
ftp://updates.redhat.com/9/en/os/noarch/ddskk-xemacs-11.6.0-11.90.noar ch.rpm
Redhat ddskk-11.6.0-10.noarch.rpm
-
Red Hat ddskk-11.6.0-11.90.noarch.rpm
ftp://updates.redhat.com/9/en/os/noarch/ddskk-11.6.0-11.90.noarch.rpm
skk skk 10.62 a
-
Debian skk_10.62a-4woody1_all.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/s/skk/skk_10.62a-4woody1_ all.deb -
Debian skkserv_10.62a-4woody1_alpha.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woo dy1_alpha.deb -
Debian skkserv_10.62a-4woody1_arm.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woo dy1_arm.deb -
Debian skkserv_10.62a-4woody1_hppa.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woo dy1_hppa.deb -
Debian skkserv_10.62a-4woody1_i386.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woo dy1_i386.deb -
Debian skkserv_10.62a-4woody1_ia64.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woo dy1_ia64.deb -
Debian skkserv_10.62a-4woody1_m68k.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woo dy1_m68k.deb -
Debian skkserv_10.62a-4woody1_mips.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woo dy1_mips.deb -
Debian skkserv_10.62a-4woody1_mipsel.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woo dy1_mipsel.deb -
Debian skkserv_10.62a-4woody1_powerpc.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woo dy1_powerpc.deb -
Debian skkserv_10.62a-4woody1_s390.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woo dy1_s390.deb -
Debian skkserv_10.62a-4woody1_sparc.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/s/skk/skkserv_10.62a-4woo dy1_sparc.deb
ddskk ddskk 11.6 .rel.0
-
Debian ddskk_11.6.rel.0-2woody1_all.deb
Debian GNU/Linux 3.0 alias woody.
http://security.debian.org/pool/updates/main/d/ddskk/ddskk_11.6.rel.0- 2woody1_all.deb
References
SKK/DDSKK Insecure Temporary Files Vulnerability
References:
References: