Title: Xine Bug Reporting Script Insecure Temporary File Creation Vulnerability
Severity: MODERATE
Description:
The xine package is a multimedia player for UNIX/Linux variants.
The xine bug-reporting scripts (xine-bugreport and xine-check) create temporary files in an insecure manner.
The source of the problem is that the program will cat a logfile into a temporary bug reporting file (typically '/tmp/xine-bugreport'). Since this filename is static, an attacker can simply create a symbolic link in its place. A malicious local user could take advantage of this issue by mounting a symbolic-link attack to corrupt other system files, most likely resulting in the destruction of data. Privilege escalation is also possible. This issue occurs only when the vulnerable scripts are run to submit a bug report to the vendor.
Note that xine-bugreport and xine-check are separate instances of the same script.
Affected Products:
- MandrakeSoft Linux Mandrake 10.0.0
- MandrakeSoft Linux Mandrake 9.2.0
- MandrakeSoft Linux Mandrake 9.2.0 amd64
- RedHat Linux 7.3.0
- RedHat Linux 7.3.0 i386
- RedHat Linux 7.3.0 i686
- Slackware Linux -current
- Slackware Linux 9.1.0
- xine xine 0.9.13
- xine xine 0.9.8
- xine xine 1-beta1
- xine xine 1-beta10
- xine xine 1-beta11
- xine xine 1-beta12
- xine xine 1-beta2
- xine xine 1-beta3
- xine xine 1-beta4
- xine xine 1-beta5
- xine xine 1-beta6
- xine xine 1-beta7
- xine xine 1-beta8
- xine xine 1-beta9
- xine xine 1-rc0a
- xine xine 1-rc1
- xine xine 1-rc2
- xine xine 1-rc3
- xine xine 1-rc3a
- xine xine 1-rc3b
- xine xine-ui 0.9.20
- xine xine-ui 0.9.21
- xine xine-ui 0.9.22
- xine xine-ui 0.9.23
References:
- xine: xine Homepage
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
