Bug 112925 (CVE-2005-2672) - VUL-0: CVE-2005-2672: sensors: symlink attack possible over pwmconfig
Summary: VUL-0: CVE-2005-2672: sensors: symlink attack possible over pwmconfig
Status: RESOLVED FIXED
Alias: CVE-2005-2672
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other All
: P5 - None : Normal
Target Milestone: ---
Assignee: Dr. Werner Fink
QA Contact: Security Team bot
URL: http://www.ubuntulinux.org/support/do...
Whiteboard: CVE-2005-2672: CVSS v2 Base Score: 2....
Keywords:
Depends on:
Blocks:
 
Reported: 2005-08-25 10:20 UTC by Thomas Biege
Modified: 2021-11-03 14:47 UTC (History)
1 user (show)

See Also:
Found By: Other
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
fixed (915 bytes, text/plain)
2005-08-25 11:34 UTC, Dr. Werner Fink 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Thomas Biege 2005-08-25 10:20:12 UTC 
Hello Werner,
fixing this in STABLE will suffice.

CAN-2005-2672

Candidate: CAN-2005-2672
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2672
Reference: BID:14624
Reference: URL:http://www.securityfocus.com/bid/14624
Reference: UBUNTU:USN-172-1
Reference: URL:http://www.ubuntulinux.org/support/documentation/usn/usn-172-1
Reference: CONFIRM:http://secure.netroedge.com/~lm78/cvs/lm_sensors2/CHANGES

pwmconfig in LM_sensors before 2.9.1 creates temporary files
insecurely, which allows local users to overwrite arbitrary files via
a symlink attack on the fancontrol temporary file.
Comment 1 Dr. Werner Fink 2005-08-25 11:11:54 UTC 
Args ... STABLE uses lm_sensors-2.9.1. Now ... is 2.9.1 secure?
Accordingly to your links it is not ... but is this true?
Comment 2 Thomas Biege 2005-08-25 11:23:06 UTC 
still vulberable.

 egrep -v '(INTERVAL|FCTEMPS|FCFANS|MAXTEMP|MINTEMP|MINSTART|MINSTOP)' $FCCONFIG
>/tmp/fancontrol
echo -e
"INTERVAL=$INTERVAL\nFCTEMPS=$FCTEMPS\nFCFANS=$FCFANS\nMINTEMP=$MINTEMP\nMAXTEMP=$MAXTEMP\nMINSTART=$MINSTART\nMINSTOP=$MINSTOP"
>>/tmp/fancontrol
Comment 3 Dr. Werner Fink 2005-08-25 11:34:25 UTC 
Created attachment 47528 [details]
fixed
Comment 4 Dr. Werner Fink 2005-08-25 11:34:46 UTC 
see attachment
Comment 5 Thomas Biege 2005-08-25 11:38:52 UTC 
Thanks!
Comment 6 Thomas Biege 2009-10-13 20:59:25 UTC 
CVE-2005-2672: CVSS v2 Base Score: 2.1 (AV:L/AC:L/Au:N/C:N/I:P/A:N)