Bug 112925 (CVE-2005-2672)

Summary:	VUL-0: CVE-2005-2672: sensors: symlink attack possible over pwmconfig
Product:	[Novell Products] SUSE Security Incidents	Reporter:	Thomas Biege <thomas>
Component:	Incidents	Assignee:	Dr. Werner Fink <werner>
Status:	RESOLVED FIXED	QA Contact:	Security Team bot <security-team>
Severity:	Normal
Priority:	P5 - None	CC:	security-team
Version:	unspecified
Target Milestone:	---
Hardware:	Other
OS:	All
URL:	http://www.ubuntulinux.org/support/documentation/usn/usn-172-1
Whiteboard:	CVE-2005-2672: CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)
Found By:	Other	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---
Attachments:	fixed

Description Thomas Biege 2005-08-25 10:20:12 UTC

Hello Werner,
fixing this in STABLE will suffice.

CAN-2005-2672

Candidate: CAN-2005-2672
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2672
Reference: BID:14624
Reference: URL:http://www.securityfocus.com/bid/14624
Reference: UBUNTU:USN-172-1
Reference: URL:http://www.ubuntulinux.org/support/documentation/usn/usn-172-1
Reference: CONFIRM:http://secure.netroedge.com/~lm78/cvs/lm_sensors2/CHANGES

pwmconfig in LM_sensors before 2.9.1 creates temporary files
insecurely, which allows local users to overwrite arbitrary files via
a symlink attack on the fancontrol temporary file.

Comment 1 Dr. Werner Fink 2005-08-25 11:11:54 UTC

Args ... STABLE uses lm_sensors-2.9.1. Now ... is 2.9.1 secure?
Accordingly to your links it is not ... but is this true?

Comment 2 Thomas Biege 2005-08-25 11:23:06 UTC

still vulberable.

 egrep -v '(INTERVAL|FCTEMPS|FCFANS|MAXTEMP|MINTEMP|MINSTART|MINSTOP)' $FCCONFIG
>/tmp/fancontrol
echo -e
"INTERVAL=$INTERVAL\nFCTEMPS=$FCTEMPS\nFCFANS=$FCFANS\nMINTEMP=$MINTEMP\nMAXTEMP=$MAXTEMP\nMINSTART=$MINSTART\nMINSTOP=$MINSTOP"
>>/tmp/fancontrol

Comment 3 Dr. Werner Fink 2005-08-25 11:34:25 UTC

Created attachment 47528 [details]
fixed

Comment 4 Dr. Werner Fink 2005-08-25 11:34:46 UTC

see attachment

Comment 5 Thomas Biege 2005-08-25 11:38:52 UTC

Thanks!

Comment 6 Thomas Biege 2009-10-13 20:59:25 UTC

CVE-2005-2672: CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)