|
|
|
 |
Vulnerability Note VU#105347XMCD vulnerable to arbitrary file overwriting via symlink redirection of temporary fileOverviewxmcd is an x11/motif CD playing utility, in the public domain. cda, the command line interface to xmcd, executes with system administrator privileges. It is vulnerable to a symbolic link attack that may allow a local user to obtain administrator privileges.I. Descriptioncda, the command line interface to xmcd, executes with system administrator privileges. It creates insecure temporary files with predictable names in /tmp, a world-writable directory.II. ImpactBy creating symbolic links with appropriate names, a local attacker may overwrite any writable file on the system. If the attacker can control the content of the overwritten files, elevation of privileges may result.III. SolutionApply vendor patches; see the Systems Affected section below.Remove the setuid protection from cda.
References
This vulnerability was first reported by Paul Starzetz. This document was last modified by Tim Shimeall.
If you have feedback, comments, or additional information about this vulnerability, please send us
email. |
||||||||||||||||||||||||||||||||||||||||||||||||||||
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||
Get Adobe Reader