Paketname
ksymoops
Datum
2004-06-10
Advisory ID
MDKSA-2004:060
Betroffene Versionen
9.2 amd64 , CS2.1 x86_64 , 10.0 amd64 , CS2.1 i586 , 10.0 i586 , 9.2 i586 , 9.1 i586 , 9.1 i586

Problembeschreibung

Geoffrey Lee discovered a problem with the ksymoops-gznm script distributed with Mandrakelinux. The script fails to do proper checking when copying a file to the /tmp directory. Because of this, a local attacker can setup a symlink to point to a file that they do not have permission to remove. The problem is difficult to exploit because someone with root privileges needs to run ksymoops on a particular module for which a symlink for the same filename already exists.

Aktualisierte Pakete

9.2 amd64

 f6e07e8051ff88692b1ecf25ca6df67c  amd64/9.2/RPMS/ksymoops-2.4.9-2.1.92mdk.amd64.rpm
da2871cd2185de4399dca040a4917d36  amd64/9.2/SRPMS/ksymoops-2.4.9-2.1.92mdk.src.rpm

CS2.1 x86_64

 c7b36de07cf6e4730d19c1c70d5ae4f4  x86_64/corporate/2.1/RPMS/ksymoops-2.4.5-1.1.C21mdk.x86_64.rpm
371e1e2e5c13fe3f3d4d69f7640d62df  x86_64/corporate/2.1/SRPMS/ksymoops-2.4.5-1.1.C21mdk.src.rpm

10.0 amd64

 0069cbfa72e078a575a61b47ae8d7db4  amd64/10.0/RPMS/ksymoops-2.4.9-2.1.100mdk.amd64.rpm
bc77b3b817f0405fc756b774e1cd8b2b  amd64/10.0/SRPMS/ksymoops-2.4.9-2.1.100mdk.src.rpm

CS2.1 i586

 55e5b60446af97754617854ae007c076  corporate/2.1/RPMS/ksymoops-2.4.5-1.1.C21mdk.i586.rpm
371e1e2e5c13fe3f3d4d69f7640d62df  corporate/2.1/SRPMS/ksymoops-2.4.5-1.1.C21mdk.src.rpm

10.0 i586

 fd71046851d3f6f78aed37139dba5801  10.0/RPMS/ksymoops-2.4.9-2.1.100mdk.i586.rpm
bc77b3b817f0405fc756b774e1cd8b2b  10.0/SRPMS/ksymoops-2.4.9-2.1.100mdk.src.rpm

9.2 i586

 c841d77df648a31b1c4abbef5ed81164  9.2/RPMS/ksymoops-2.4.9-2.1.92mdk.i586.rpm
da2871cd2185de4399dca040a4917d36  9.2/SRPMS/ksymoops-2.4.9-2.1.92mdk.src.rpm

9.1 i586

 4d5bba5a89df40aa948d1ab109dae1fd  9.1/RPMS/ksymoops-2.4.8-1.1.91mdk.i586.rpm
90dc1f924e31cb629c2be369aa369be0  9.1/SRPMS/ksymoops-2.4.8-1.1.91mdk.src.rpm

9.1 i586

 2af8ce77771cc51c21c17f3966a80d07  ppc/9.1/RPMS/ksymoops-2.4.8-1.1.91mdk.ppc.rpm
90dc1f924e31cb629c2be369aa369be0  ppc/9.1/SRPMS/ksymoops-2.4.8-1.1.91mdk.src.rpm