Skip to Content.
Sympa Menu

sm-security - [SM-Security] lm_sensors: symlink attack

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Thomas Houssin <thomas.houssin AT gmail.com>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] lm_sensors: symlink attack
  • Date: Sat, 10 Sep 2005 20:02:18 +0200

Synopsis
========
lm_sensors is vulnerable to a symlink attack, potentially allowing a
local user to overwrite arbitrary files.

Background
==========
lm_sensors provides essential tools for monitoring the hardware health
of Linux systems containing hardware health monitoring hardware such as
the LM78 and LM75

Description
===========
CAN-2005-2672:
pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely,
which allows local users to overwrite arbitrary files via a symlink
attack on the fancontrol temporary file.

Affected packages
=================
lm_sensors in all grimoires is affected. This is now fixed in devel,
test, stable-rc 0.2 and stable 0.1 grimoires.

Resolution
==========
All lm_sensors users should upgrade to the latest available version:
# scribe update
# cast -c lm_sensors

References
==========
[ 1 ] CAN-2005-2672
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2672


--
Thomas Houssin

Security Team Leader Source Mage GNU/Linux (http://www.sourcemage.org)
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature



  • [SM-Security] lm_sensors: symlink attack, Thomas Houssin, 09/10/2005

Archive powered by MHonArc 2.6.24.

Top of Page