PT-2009-1111 · Sblim+1 · Sblim-Sfcb+1

Marcus Meissner

·

Published

2009-02-03

·

Updated

2018-12-11

·

CVE-2009-0416

CVSS v2.0

6.9

Medium

VectorAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions sblim-sfcb version 1.3.2
Description The issue is related to the SSL certificate setup program (genSslCert.sh) in sblim-sfcb, which allows local users to overwrite arbitrary files via a symlink attack on temporary files, including /var/tmp/key.pem, /var/tmp/cert.pem, and /var/tmp/ssl.cnf. This vulnerability is associated with incorrect link resolution before file access, potentially allowing an attacker to access confidential data, compromise its integrity, and cause a denial of service.
Recommendations For version 1.3.2, consider restricting access to the genSslCert.sh program to prevent local users from exploiting the symlink vulnerability until a patch is available. As a temporary workaround, monitor and restrict modifications to the /var/tmp/key.pem, /var/tmp/cert.pem, and /var/tmp/ssl.cnf files to minimize the risk of exploitation.

Fix

Link Following

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2018-2754
ALT-PU-2018-2755
ALT-PU-2018-2814
BDU:2020-02817
CVE-2009-0416

Affected Products

Alt Linux
Sblim-Sfcb