sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] lm_sensors: symlink attack, additions

From: Thomas Houssin <thomas.houssin AT gmail.com>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] lm_sensors: symlink attack, additions
Date: Sat, 10 Sep 2005 20:26:09 +0200

A precision about the previous mail:

Description
===========
CAN-2005-2672:
pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely,
which allows local users to overwrite arbitrary files via a symlink
attack on the fancontrol temporary file.

2.9.1 IS vulnerable. The Changelog for lm_sensors on
http://www2.lm-sensors.nu/~lm78/cvs/browse.cgi/lm_sensors2/CHANGES shows
that this issue was fixed in 2.9.2 :
49 Program pwmconfig: Fix unsafe temporary file use

--
Thomas Houssin

Security Team Leader Source Mage GNU/Linux (http://www.sourcemage.org)
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature

[SM-Security] lm_sensors: symlink attack, additions, Thomas Houssin, 09/10/2005