Bug 472113 (CVE-2008-5148)

Summary: CVE-2008-5148 geda-gnetlist insecure temporary file use
Product: [Other] Security Response Reporter: Josh Bressers <bressers>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED NEXTRELEASE QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: chitlesh
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
URL: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-5148
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2008-12-14 11:16:06 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 472114, 472115, 472116    
Bug Blocks:    

Description Josh Bressers 2008-11-18 20:17:05 UTC
sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite
arbitrary files via a symlink attack on a /tmp/##### temporary file.

http://lists.debian.org/debian-devel/2008/08/msg00347.html
http://uvw.ru/report.sid.txt

Comment 1 Josh Bressers 2008-11-18 20:17:37 UTC
Created geda-gnetlist tracking bugs for this issue

CVE-2008-5148 Affects: F8 [bug #472114]
CVE-2008-5148 Affects: F9 [bug #472115]
CVE-2008-5148 Affects: Fdevel [bug #472116]

Comment 2 Fedora Update System 2008-11-22 16:54:04 UTC
geda-gnetlist-20080929-2.fc10 has been pushed to the Fedora 10 stable repository.  If problems still persist, please make note of it in this bug report.