Проблемы символьных линков во многих утилитах (linux)

Во многих утилитах не проверяют символьные линки при создании временных файлов...

[SECURITY] [DSA-011-1] New version of mgetty released

Package: mgetty Vulnerability: insecure tempfile Debian-specific: no Immunix reports that mgetty does not create temporary files in a secure manner, which could lead to a symlink attack. This has been corrected in mgetty 1.1.21-3potato1 We recommend you upgrade your mgetty package immediately. wg...

[SECURITY] [DSA-008-1] dialog symlink attack

Package : dialog Problem type : insecure temporary files Debian-specific: no Matt Kraai reported that he found a problem in the way dialog creates lock-files: it did not create them safely which made it susceptible to a symlink attack. This has been fixed in version 0.9a-20000118-3bis. wget url...

ksh.temp-hole.txt

Author: Paul Szabo Recently I reported that, similarly to the recently discussed tcsh vulnerability, the Bourne shell /bin/sh creates temporary files in an insecure way: http://www.securityfocus.com/templates/archive.pike?list=1&msg=200011230225.N [email protected] At the time I als...

SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber Exploit

Exploit for solaris platform in category dos / poc ============================================================= SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber Exploit ============================================================= !/usr/local/bin/perl -w The problem is catman creates files ...

SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber

SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber !/usr/local/bin/perl -w The problem is catman creates files in /tmp insecurly. They are based on the PID of the catman process, catman will happily clobber any files that are symlinked to that file. The idea of this script is to watch the...

Дырка в catman под Solaris

Некорректная работа с временными файлами...

Solaris 2.7 / 2.8 Catman - Local Insecure tmp Symlink Exploit

Exploit for unknown platform in category dos / poc ============================================================= Solaris 2.7 / 2.8 Catman - Local Insecure tmp Symlink Exploit ============================================================= !/usr/local/bin/perl -w The problem is catman creates files ...

Solaris 2.7/2.8 Catman - Local Insecure tmp Symlink

!/usr/local/bin/perl -w The problem is catman creates files in /tmp insecurly. They are based on the PID of the catman process, catman will happily clobber any files that are symlinked to that file. The idea of this script is to create a block of symlinks to the target file with the current PID a...

Дырка в pine

Редактируемое сообщение помещается во временный файл с предсказуемым именем без проверки разрешений и символьных линков...

Дырка в diskcheck

Некорректная работа с временными файлами позволяет переписать любой системный файл с помощью символьных линков...

[SECURITY] [DSA-001-1] ed symlink attack

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory 001-1 [email protected] http://www.debian.org/security/ Wichert Akkerman November 29, 2000 -...

Дырка в bash (temp files)

При многострочном вводе пользователя создается временный файл без проверки символьных линков...

Дырка в ed

Ошибка символьных линков при создании временного файла...

Дырка в fsh

Уязвимость символьных линков при работе с временными файлами...

[SECURITY] [DSA-001-1] ed symlink attack

Package : ed Problem type : symlink attack Debian-specific: no Alan Cox discovered that GNU ed a classed line editor tool created temporary files unsafely. This has been fixed in version 0.2-18.1. wget url will fetch the file for you dpkg -i file.deb will install the referenced file. Debian...

New version of elvis-tiny released

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory [email protected] http://www.debian.org/security/ Martin Schulze November 22, 2000 -...

Дырка в elvis-tiny

Проблема символьных линков во временных файлах...

[SECURITY] New version of ghostscript released

Package : gs Problem type : symlink attack Debian-specific: no ghostscript uses temporary files to do some of its work. Unfortunately the method used to create those files wasnt secure: mktemp was used to create a name for a temporary file, but the file was not opened safely. A second problem is...

Solaris 2.x7.08 - Catman Race Condition (1)

Solaris 2.x7.08 - Catman Race Condition 1 source: https://www.securityfocus.com/bid/2149/info catman is a utility for creating preformatted man pages, distributed as part of the Solaris Operating Environment. A problem exists which could allow local users to overwrite or corrupt files owned by...