SANE不安全临时文件创建漏洞

漏洞信息详情

SANE不安全临时文件创建漏洞

• CNNVD编号：CNNVD-200112-089
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2001-0890
  
• 漏洞类型：
  
  
  设计错误
  
• 发布时间：
  
  2001-12-11
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  sane
• 漏洞来源：
  This vulnerability…

SANE library 1.0.3及其更早版本的某个后端驱动在前端软件如XSane使用时存在漏洞。本地用户可以借助临时文件上的符号链接攻击修改文件。

This issue has been addressed in SANE 1.0.7-beta1 and later. Additional upgrades are also available.
Conectiva Linux has released an advisory (CLA-2003:769) to address this issue. Please see the referenced advisory for more information.
SANE SANE 1.0 .0

• SANE sane-1.0.7-beta2
  ftp://ftp.mostang.com/pub/sane/sane-1.0.7-beta2

SANE SANE 1.0.1

• SANE sane-1.0.7-beta2
  ftp://ftp.mostang.com/pub/sane/sane-1.0.7-beta2

SANE SANE 1.0.2

• SANE sane-1.0.7-beta2
  ftp://ftp.mostang.com/pub/sane/sane-1.0.7-beta2

SANE SANE 1.0.3

• Red Hat sane-1.0.3-10.1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/sane-1.0.3-10.1.alpha.rpm
• Red Hat sane-1.0.3-10.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/sane-1.0.3-10.1.i386.rpm
• Red Hat sane-1.0.3-10.1.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/sane-1.0.3-10.1.ia64.rpm
• Red Hat sane-1.0.3-2.1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/sane-1.0.3-2.1.alpha.rpm
• Red Hat sane-1.0.3-2.1.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/sane-1.0.3-2.1.i386.rpm
• Red Hat sane-devel-1.0.3-10.1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/sane-devel-1.0.3-10.1.alpha.r
  pm
• Red Hat sane-devel-1.0.3-10.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/sane-devel-1.0.3-10.1.i386.rpm
  
• Red Hat sane-devel-1.0.3-10.1.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/sane-devel-1.0.3-10.1.ia64.rpm
  
• Red Hat sane-devel-1.0.3-2.1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/sane-devel-1.0.3-2.1.alpha.rp
  m
• Red Hat sane-devel-1.0.3-2.1.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/sane-devel-1.0.3-2.1.i386.rpm
• Red Hat xsane-0.82-2.1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/xsane-0.82-2.1.alpha.rpm
• Red Hat xsane-0.82-2.1.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/xsane-0.82-2.1.i386.rpm
• Red Hat xsane-0.82-3.1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/xsane-0.82-3.1.alpha.rpm
• Red Hat xsane-0.82-3.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/xsane-0.82-3.1.i386.rpm
• Red Hat xsane-0.82-3.1.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/xsane-0.82-3.1.ia64.rpm
• Red Hat xsane-gimp-0.82-2.1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/xsane-gimp-0.82-2.1.alpha.rpm
  
• Red Hat xsane-gimp-0.82-2.1.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/xsane-gimp-0.82-2.1.i386.rpm
• Red Hat xsane-gimp-0.82-3.1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/xsane-gimp-0.82-3.1.alpha.rpm
  
• Red Hat xsane-gimp-0.82-3.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/xsane-gimp-0.82-3.1.i386.rpm
• Red Hat xsane-gimp-0.82-3.1.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/xsane-gimp-0.82-3.1.ia64.rpm
• SANE sane-1.0.7-beta2
  ftp://ftp.mostang.com/pub/sane/sane-1.0.7-beta2

SANE SANE 1.0.4

• Conectiva sane-1.0.4-3U70_1cl.i386.rpmUpgrade for Conectiva Linux 7.
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/sane-1.0.4-3U70_1cl.i386.
  rpm
• Conectiva sane-devel-1.0.4-3U70_1cl.i386.rpmUpgrade for Conectiva Linux 7.
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/sane-devel-1.0.4-3U70_1cl
  .i386.rpm
• Conectiva sane-devel-static-1.0.4-3U70_1cl.i386.rpmUpgrade for Conectiva Linux 7.
  ftp://atualizacoes.conectiva.com.br/7.0/RPMS/sane-devel-static-1.0.4-3
  U70_1cl.i386.rpm
• SANE sane-1.0.7-beta2
  ftp://ftp.mostang.com/pub/sane/sane-1.0.7-beta2

SANE SANE 1.0.5

• Red Hat sane-backends-1.0.5-4.1.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/sane-backends-1.0.5-4.1.i386.r
  pm
• Red Hat sane-backends-1.0.5-4.1.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/sane-backends-1.0.5-4.1.ia64.r
  pm
• Red Hat sane-backends-devel-1.0.5-4.1.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/sane-backends-devel-1.0.5-4.1.
  i386.rpm
• Red Hat sane-backends-devel-1.0.5-4.1.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/sane-backends-devel-1.0.5-4.1.
  ia64.rpm
• Red Hat xsane-0.82-3.1.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/xsane-0.82-3.1.i386.rpm
• Red Hat xsane-0.82-3.1.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/xsane-0.82-3.1.ia64.rpm
• Red Hat xsane-gimp-0.82-3.1.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/xsane-gimp-0.82-3.1.i386.rpm
• Red Hat xsane-gimp-0.82-3.1.ia64.rpm
  ftp://updates.redhat.co