mhc-utils不安全临时文件创建漏洞

漏洞信息详情

mhc-utils不安全临时文件创建漏洞

• CNNVD编号：CNNVD-200303-043
• 危害等级： 低危
  
  
• CVE编号：
  CVE-2003-0120
  
• 漏洞类型：
  
  
  竞争条件
  
• 发布时间：
  
  2003-03-07
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-05-13
  
• 厂        商：
  
  mhc-utils
• 漏洞来源：
  This vulnerability…

mhc-utils package 0.25+20010625-7.1之前版本中的adb2mhc存在漏洞。本地用户可以借助名称可预测的默认临时目录上的符号链接攻击覆盖任意文件。

The following fixes are available:
mhc-utils mhc-utils 0.25 -snap20010625

• Debian mhc-utils_0.25+20010625-7.1_alpha.deb
  
  http://security.debian.org/pool/updates/main/m/mhc/mhc-utils_0.25+2001
  0625-7.1_alpha.deb
• Debian mhc-utils_0.25+20010625-7.1_arm.deb
  
  http://security.debian.org/pool/updates/main/m/mhc/mhc-utils_0.25+2001
  0625-7.1_arm.deb
• Debian mhc-utils_0.25+20010625-7.1_hppa.deb
  
  http://security.debian.org/pool/updates/main/m/mhc/mhc-utils_0.25+2001
  0625-7.1_hppa.deb
• Debian mhc-utils_0.25+20010625-7.1_i386.deb
  
  http://security.debian.org/pool/updates/main/m/mhc/mhc-utils_0.25+2001
  0625-7.1_i386.deb
• Debian mhc-utils_0.25+20010625-7.1_ia64.deb
  
  http://security.debian.org/pool/updates/main/m/mhc/mhc-utils_0.25+2001
  0625-7.1_ia64.deb
• Debian mhc-utils_0.25+20010625-7.1_m68k.deb
  
  http://security.debian.org/pool/updates/main/m/mhc/mhc-utils_0.25+2001
  0625-7.1_m68k.deb
• Debian mhc-utils_0.25+20010625-7.1_mips.deb
  
  http://security.debian.org/pool/updates/main/m/mhc/mhc-utils_0.25+2001
  0625-7.1_mips.deb
• Debian mhc-utils_0.25+20010625-7.1_mipsel.deb
  
  http://security.debian.org/pool/updates/main/m/mhc/mhc-utils_0.25+2001
  0625-7.1_mipsel.deb
• Debian mhc-utils_0.25+20010625-7.1_powerpc.deb
  
  http://security.debian.org/pool/updates/main/m/mhc/mhc-utils_0.25+2001
  0625-7.1_powerpc.deb
• Debian mhc-utils_0.25+20010625-7.1_s390.deb
  
  http://security.debian.org/pool/updates/main/m/mhc/mhc-utils_0.25+2001
  0625-7.1_s390.deb
• Debian mhc-utils_0.25+20010625-7.1_sparc.deb
  
  http://security.debian.org/pool/updates/main/m/mhc/mhc-utils_0.25+2001
  0625-7.1_sparc.deb
• Debian mhc_0.25+20010625-7.1_all.deb
  
  http://security.debian.org/pool/updates/main/m/mhc/mhc_0.25+20010625-7
  .1_all.deb

来源: DEBIAN
名称: DSA-256
链接:http://www.debian.org/security/2003/dsa-256

来源: BID
名称: 6978
链接:http://www.securityfocus.com/bid/6978

来源: XF
名称: mhc-adb2mhc-insecure-tmp(11439)
链接:http://www.iss.net/security_center/static/11439.php