PT-2008-1124 · Gentoo Linux · Am-Utils

Tavis Ormandy · Published 2008-02-29 · Updated 2023-02-13 · CVE-2008-1078

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions am-utils versions prior to 6.1.5

Description The issue affects the am-utils package in Gentoo Linux and potentially other distributions, allowing local users to exploit it and compromise the confidentiality, integrity, and availability of protected information. This can be achieved through a symlink attack on temporary files, specifically targeting the expn[PID] file, enabling local users to overwrite arbitrary files.

Recommendations For versions prior to 6.1.5, update to version 6.1.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the expn function to minimize the risk of exploitation.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

BDU:2015-09628

CVE-2008-1078

Affected Products

Am-Utils

References · 14

• 🔥 http://bugs.gentoo.org/show_bug.cgi?id=210158 · Exploit
• http://secunia.com/advisories/33400 · Vendor Advisory
• http://secunia.com/advisories/29694 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1078 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200804-09.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09628 · Security Note
• https://redhat.com/archives/fedora-package-announce/2009-January/msg00273.html · Vendor Advisory
• http://secunia.com/advisories/29187 · Vendor Advisory
• http://secunia.com/advisories/29144 · Vendor Advisory
• https://issues.rpath.com/browse/RPL-2255 · Note
• http://securityfocus.com/bid/28044 · Note
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0088 · Note
• http://securityfocus.com/archive/1/488931/100/0/threaded · Note
• http://security.gentoo.org/glsa/glsa-200804-09.xml · Note