PT-2009-4354 · Red Hat · Dhcpd+1

Robert Vogelgesang · Published 2009-07-17 · Updated 2023-02-13 · CVE-2009-1893

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Red Hat dhcpd version 3.0.1 in Red Hat Enterprise Linux (RHEL) 3

Description: The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file, related to the dhcpd init script's configtest function and the "dhcpd -t" command.

Recommendations: For Red Hat dhcpd version 3.0.1 in Red Hat Enterprise Linux (RHEL) 3, consider restricting access to the configtest function in the dhcpd init script to prevent local users from overwriting arbitrary files until a fix is available.

Fix

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2009-1893

RHSA-2009:1154

Affected Products

Red Hat

Dhcpd

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2009-1893 · Security Note
• http://redhat.com/support/errata/RHSA-2009-1154.html · Vendor Advisory
• http://secunia.com/advisories/35831 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6440 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11597 · Note
• http://securityfocus.com/bid/35670 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=510024 · Note
• http://securitytracker.com/id?1022554 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51718 · Note