Bug 199432 - nant: arbitrary command execution due to buildroot remainders
Summary: nant: arbitrary command execution due to buildroot remainders
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: nant
Version: rawhide
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Paul F. Johnson
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-07-19 15:40 UTC by Ville Skyttä
Modified: 2007-11-30 22:11 UTC (History)
2 users (show)

Fixed In Version: 0.85-6
Clone Of:
Environment:
Last Closed: 2006-07-20 12:26:42 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Ville Skyttä 2006-07-19 15:40:26 UTC 
See bug 193957 comment 17 (and a potential fix in comment 16 there):

/usr/bin/nant from nant-0.85-5.fc6 tries to execute NAnt.exe from a path
containing the build root, ie. /var/tmp/... which is world writable, resulting
in arbitrary command execution vulnerability.
Comment 1 Paul F. Johnson 2006-07-20 12:26:42 UTC 
This has been fixed in 0.85-6
Note You need to log in before you can comment on or make changes to this bug.