PT-2008-6164 · Ncsa · Xmcd

Robert Buchholz · Published 2008-11-07 · Updated 2017-08-08 · CVE-2008-4994

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xmcd version 2.6

Description The issue allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.*pid temporary file, which is related to the ncsarmt and ncsawrap scripts in xmcd.

Recommendations For version 2.6, consider restricting access to the ncsarmt and ncsawrap scripts to prevent exploitation until a patch is available. As a temporary workaround, monitor and restrict the creation of symlinks on /tmp/Mosaic.*pid temporary files to minimize the risk of arbitrary file overwrites.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2008-4994

Affected Products

Xmcd

References · 7

• 🔥 http://dev.gentoo.org/~rbu/security/debiantemp/xmcd · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4994 · Security Note
• http://openwall.com/lists/oss-security/2008/10/30/2 · Note
• https://bugs.gentoo.org/show_bug.cgi?id=235770 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46550 · Note
• http://securityfocus.com/bid/32288 · Note
• http://bugs.debian.org/496416 · Note