Bug 436263 (CVE-2008-0883)

Summary:	CVE-2008-0883 acroread: insecure handling of temporary files
Product:	[Other] Security Response	Reporter:	Tomas Hoger <thoger>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	jrusnack, kreilly, krh
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
URL:	http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-0883
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2008-07-25 07:52:08 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	455834, 455835, 455837
Bug Blocks:

Description Tomas Hoger 2008-03-06 08:47:48 UTC

Common Vulnerabilities and Exposures assigned an identifier CVE-2008-0883 to the following vulnerability:

acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite
arbitrary files via a symlink attack on temporary files related to SSL
certificate handling.

Detailed descriptions with suggested solution:
http://marc.info/?l=oss-security&m=120389711215086&w=2

References:
http://support.novell.com/techcenter/psdb/d8c48c63359fc807624182696d3d149c.html
http://www.securityfocus.com/bid/28091
http://www.frsirt.com/english/advisories/2008/0765
http://secunia.com/advisories/29229

Comment 1 Tomas Hoger 2008-03-06 09:01:06 UTC

This problem only affects uncommonly used options of acroread startup script.

This issue was rated as having low security impact and may be addressed in
future Adobe Acrobat Reader reader as shipped in Red Hat Enterprise Linux Extras
/ Supplementary.

Comment 3 Tomas Hoger 2008-07-18 07:16:08 UTC

Upstream advisory for this issues:
  http://www.adobe.com/support/security/advisories/apsa08-02.html

Fixed in upstream version 8.1.2_SU1 (Security Update 1):
  http://www.adobe.com/support/security/bulletins/apsb08-15.html

Comment 4 Red Hat Product Security 2008-07-25 07:52:08 UTC

This issue was addressed in:

Red Hat Enterprise Linux Extras:
  http://rhn.redhat.com/errata/RHSA-2008-0641.html