Bug 58836 (CVE-2004-0559)

Summary:	VUL-0: CVE-2004-0559: temp file problem in webmin %pre and %post scripts
Product:	[Novell Products] SUSE Security Incidents	Reporter:	Ludwig Nussel <lnussel>
Component:	Incidents	Assignee:	Ihno Krumreich <ihno>
Status:	RESOLVED FIXED	QA Contact:	Security Team bot <security-team>
Severity:	Major
Priority:	P3 - Medium	CC:	security-team
Version:	unspecified
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	CVE-2004-0559: CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)
Found By:	---	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Ludwig Nussel 2004-08-16 18:13:27 UTC

the %post script writes stuff into the directory /tmp/.webmin/. This directory  
is created in an insecure way in %pre. Please fix the .spec to not use such a  
directory at all.

Comment 1 Ludwig Nussel 2004-08-16 18:13:27 UTC

<!-- SBZ_reproduce  -->
hewitt:/tmp# su - abuild 
hewitt:/usr/src/packages/BUILD/webmin-1.150$ cd /tmp/ 
hewitt:/tmp$ mkdir .webmin 
hewitt:/tmp$ cd .webmin/ 
hewitt:/tmp/.webmin$ cat /etc/issue 
 
Welcome to SuSE Linux 8.2 (i586) - Kernel \r (\l). 
 
 
hewitt:/tmp/.webmin$ ln -s /etc/issue webmin-setup.out 
hewitt:/tmp/.webmin$ l 
total 8 
drwxr-xr-x    2 abuild   abuild       4096 Aug 16 10:02 ./ 
drwxrwxrwt    5 root     root         4096 Aug 16 10:01 ../ 
lrwxrwxrwx    1 abuild   abuild         10 Aug 16 10:02 webmin-setup.out 
-> /etc/issue 
hewitt:/tmp/.webmin$ logout 
hewitt:/tmp# cd - 
/usr/src/packages/RPMS/noarch 
hewitt:/usr/src/packages/RPMS/noarch# rpm -Uvh webmin-1.150-3.noarch.rpm  
failed to stat /sys: No such file or directory 
Operating system is SuSE Linux 8.2 
webmin                      ################################################## 
insserv: Service network has to be enabled for service webmin 
insserv: exiting now! 
Webmin install complete. You can now login to http://hewitt:10000/ 
as root with your root password. 
hewitt:/usr/src/packages/RPMS/noarch# head /etc/issue 
*********************************************************************** 
*            Welcome to the Webmin setup script, version 1.150        * 
*********************************************************************** 
Webmin is a web-based interface that allows Unix-like operating 
systems and common Unix services to be easily administered. 
 
Installing Webmin in /usr/lib/webmin ... 
 
*********************************************************************** 
Webmin uses separate directories for configuration files and log files.

Comment 2 Ludwig Nussel 2004-08-23 18:38:30 UTC

CAN-2004-0559

Comment 3 Ludwig Nussel 2004-08-25 17:10:08 UTC

packages approved

Comment 4 Thomas Biege 2009-10-13 20:32:23 UTC

CVE-2004-0559: CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)