PT-2008-6164 · Ncsa · Xmcd

Robert Buchholz · Publicado 2008-11-07 · Atualizado 2017-08-08 · CVE-2008-4994

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xmcd version 2.6

Description The issue allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.*pid temporary file, which is related to the ncsarmt and ncsawrap scripts in xmcd.

Recommendations For version 2.6, consider restricting access to the ncsarmt and ncsawrap scripts to prevent exploitation until a patch is available. As a temporary workaround, monitor and restrict the creation of symlinks on /tmp/Mosaic.*pid temporary files to minimize the risk of arbitrary file overwrites.

Exploit

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2008-4994

Produtos afetados

Xmcd

Referências · 7

• 🔥 http://dev.gentoo.org/~rbu/security/debiantemp/xmcd · Exploit
• http://openwall.com/lists/oss-security/2008/10/30/2 · Nota
• https://bugs.gentoo.org/show_bug.cgi?id=235770 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46550 · Nota
• http://securityfocus.com/bid/32288 · Nota
• http://bugs.debian.org/496416 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4994 · Nota de Segurança