H+BEDV AntiVir Insecure Temporary File Creation Symbolic Link Vulnerability

Bugtraq ID:	9413
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jan 13 2004 12:00AM
Updated:	Jan 13 2004 12:00AM
Credit:	Discovery credited to Rene <[email protected]>
Vulnerable:	H+BEDV AntiVir 2.0.9
Not Vulnerable:	H+BEDV AntiVir 2.0.9 -12

H+BEDV AntiVir Insecure Temporary File Creation Symbolic Link Vulnerability

It has been reported that AnitVar does not securely create temporary files when the process is executed. Due to this issue a local attacker may be able to launch a symbolic link attack against system files.

H+BEDV AntiVir Insecure Temporary File Creation Symbolic Link Vulnerability

No exploit is required for this vulnerability.

H+BEDV AntiVir Insecure Temporary File Creation Symbolic Link Vulnerability

Solution:
The vendor has released an upgrade to address this issue. Customers may download the updates by executing the following command:
$ antivir --update
Additionally the update can be downloaded, from the following location:


H+BEDV AntiVir 2.0.9

• H+BEDV 2.0.9-12 (avlxwks.tgz)
  http://www.antivir.de/download/download.htm

H+BEDV AntiVir Insecure Temporary File Creation Symbolic Link Vulnerability

References:

• Vendor Homepage (H+BEDV)
  
• Re: symlink vul for Antivir / Linux Version 2.0.9-9 (maybe lower) (AntiVir Support )
  
• symlink vul for Antivir / Linux Version 2.0.9-9 (maybe lower) (Rene )