Bug 1165718 - (CVE-2020-10236) VUL-1: CVE-2020-10236: froxlor: Static/guessable filenames in /tmp used in installer
VUL-1: CVE-2020-10236: froxlor: Static/guessable filenames in /tmp used in in...
Classification: Novell Products
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents
Other Other
: P4 - Low : Minor
: ---
Assigned To: Andrej Semen
Security Team bot
Depends on:
  Show dependency treegraph
Reported: 2020-03-04 16:44 UTC by Johannes Segitz
Modified: 2020-03-09 22:39 UTC (History)
0 users

See Also:
Found By: ---
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Segitz 2020-03-04 16:44:14 UTC
The installer uses static/predictable tmp files. Line numbers are from current git master, but it's also present in froxlor in Factory

  the code is in lib/class.FroxlorInstall.php
  341                 } elseif ($fp = @fopen('/tmp/userdata.inc.php', 'w')) {
  342                         $result = @fputs($fp, $userdata, strlen($userdata));
  343                         @fclose($fp);
  344                         $content .= $this->_status_message('orange', $this->_lng['install']['creating_configfile_temp']);
  345                         chmod('/tmp/userdata.inc.php', 0440);
  719                         // create temporary backup-filename
  720                         $filename = "/tmp/froxlor_backup_" . date('YmdHi') . ".sql";

  Local users can use this to cause DoS or corrupt files owned by the user
  running the webserver.
Comment 3 Johannes Segitz 2020-03-09 15:13:29 UTC
This is CVE-2020-10236. Nothing to do for SLE