Javier Fern?ndez-Sanguino Pe?a has reported a vulnerability in Apache, which potentially can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges.
The vulnerability is caused due to the check_forensic script creating temporary files insecurely. This can be exploited via symlink attacks to create or overwrite arbitrary files on the system with the privileges of the user running the vulnerable script.
SOFTWARE:
Apache 1.3.x
Apache 2.0.x
SOLUTION:
Grant only trusted users access to affected systems.
PROVIDED AND/OR DISCOVERED BY:
Javier Fern?ndez-Sanguino Pe?a
ORIGINAL ADVISORY:
http://www.ubuntulinux.org/support/documentation/usn/usn-65-1
VERIFY ADVISORY:
http://secunia.com/advisories/13925/
Secunia Security Advisories
http://community.securityteam.us/article.php/20050207125041481