PT-2008-1021 · Debian · Mon

Published 2008-10-07 · Updated 2017-08-08 · CVE-2008-4477

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions mon versions 0.99.2

Description The issue affects the mon package in Debian GNU/Linux, potentially leading to breaches of confidentiality, integrity, and availability of protected information. It can be exploited by a local attacker. Specifically, the alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file.

Recommendations For mon version 0.99.2, consider restricting access to the alert.d/test.alert to prevent local users from overwriting arbitrary files until a patch is available. As a temporary workaround, avoid using the test.alert.log temporary file in the affected alert.d/test.alert until the issue is resolved.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2015-01979

CVE-2008-4477

DSA-1648-1

Affected Products

Mon

References · 14

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4477 · Security Note
• https://bdu.fstec.ru/vul/2015-01979 · Security Note
• http://us.debian.org/security/2008/dsa-1648 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4477 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2008:214 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45738 · Note
• http://openwall.com/lists/oss-security/2008/10/30/2 · Note
• http://secunia.com/advisories/32183 · Note
• http://debian.org/security/dsa-1648 · Note
• http://dev.gentoo.org/~rbu/security/debiantemp/mon · Note
• http://securityfocus.com/bid/31597 · Note
• https://bugs.gentoo.org/show_bug.cgi?id=235770 · Note
• http://lists.debian.org/debian-devel/2008/08/msg00312.html · Note
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496398 · Note