PT-2008-4913 · Unknown · Initscripts

Herbert Poetzl + 1 · Published 2008-09-29 · Updated 2017-08-08 · CVE-2008-3524

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions initscripts versions prior to 8.76.3-1

Description The issue allows local users to delete arbitrary files via a symlink attack on a file or directory under /var/lock or /var/run. This is due to a vulnerability in the rc.sysinit script in initscripts.

Recommendations For initscripts versions prior to 8.76.3-1, update to version 8.76.3-1 or later to resolve the issue. As a temporary workaround, consider restricting access to the /var/lock and /var/run directories to minimize the risk of exploitation.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2008-3524

Affected Products

Initscripts

References · 10

• http://secunia.com/advisories/32037 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3524 · Security Note
• https://redhat.com/archives/fedora-package-announce/2008-September/msg01135.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=458504 · Note
• https://issues.rpath.com/browse/RPL-2857 · Note
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0318 · Note
• http://secunia.com/advisories/32710 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45402 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=458652 · Note
• http://securityfocus.com/bid/31385 · Note