 Javier Fern?ndez-Sanguino Pe?a has reported a vulnerability in Apache, which potentially can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges.
The vulnerability is caused due to the check_forensic script creating temporary
files insecurely. This can be exploited via symlink attacks to create or overwrite
arbitrary files on the system with the privileges of the user running the vulnerable
script.
SOFTWARE:
Apache 1.3.x
Apache 2.0.x
SOLUTION:
Grant only trusted users access to affected systems.
PROVIDED AND/OR DISCOVERED BY:
Javier Fern?ndez-Sanguino Pe?a
ORIGINAL ADVISORY:
http://www.ubuntulinux.org/support/documentation/usn/usn-65-1
VERIFY ADVISORY:
http://secunia.com/advisories/13925/
Secunia Security Advisories
| 
Contribute :
Advanced Search :
Web Resources :
Polls :
File Repository
