Bug 958015 (CVE-2013-2029)

Summary:	CVE-2013-2029 Nagios core: Insecure temporary file usage in nagios.upgrade_to_v3.sh
Product:	[Other] Security Response	Reporter:	Kurt Seifried <kseifried>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	abaron, aortega, apevec, ayoung, chrisw, dallan, gmollett, gmurphy, jkt, jrusnack, kseifried, markmc, rbryant, rhos-maint, sclewis, security-response-team
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	All
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:	CVE-2013-4214	Environment:
Last Closed:	2014-03-07 02:13:40 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	958292, 958294, 958297, 994761, 994763, 994765
Bug Blocks:	958515

Description Kurt Seifried 2013-04-30 07:20:38 UTC

+++ This bug was initially created as a clone of Bug #958002 +++

+++ This bug was initially created as a clone of Bug #957481 +++

Warning: nagios-3.4.4-1.el6ost/nagios.upgrade_to_v3.sh

    Tempfile is created by using $$ should use mktemp instead.

        tmp1=/tmp/nagioscfg.$$.tmp

--- Additional comment from Kurt Seifried on 2013-04-30 03:19:10 EDT ---

nagios.upgrade_to_v3.sh is not in upstreams files, it's added by Red Hat and several other vendors. So splitting this bug again.

Comment 1 Kurt Seifried 2013-04-30 19:03:02 UTC

This file was first added to the Nagios RPM many years ago. We need to simply change it to:

tmp1=`mktemp /tmp/XXXXXXXX`

or equivalent

Comment 2 Kurt Seifried 2013-04-30 20:35:45 UTC

Created nagios tracking bugs for this issue

Affects: fedora-all [bug 958292]

Comment 3 Kurt Seifried 2013-04-30 20:37:29 UTC

Created nagios tracking bugs for this issue

Affects: epel-6 [bug 958294]

Comment 5 Kurt Seifried 2013-07-04 06:54:10 UTC

Statement:

The Red Hat Security Response Team has rated this issue as having moderate security impact. This issue is not currently planned to be addressed in OpenStack 2.1 (Folsom). For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Comment 6 Fedora Update System 2013-09-15 18:33:09 UTC

nagios-3.5.1-1.el6 has been pushed to the Fedora EPEL 6 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 7 Martin Prpič 2013-11-14 17:03:04 UTC

Acknowledgements:

This issue was discovered by Grant Murphy of the Red Hat Product Security Team.

Comment 8 errata-xmlrpc 2013-11-18 19:25:50 UTC

This issue has been addressed in following products:

  OpenStack 3 for RHEL 6

Via RHSA-2013:1526 https://rhn.redhat.com/errata/RHSA-2013-1526.html