A TOCTOU (time-of-check time-of-use) race condition was found in the way SSSD, System Security Services Daemon, performed copying and removal of (user) directory trees.A local attacker, with permissions to write into directory of the victim, being actively / currently copied / removed via the sssd daemon facility, could use this flaw to conduct symbolic link attacks, leading to their ability to alter / remove directories outside of originally intended, to be modified, directory tree. This issue was found by Florian Weimer of Red Hat Product Security Team.
This issue affects the versions of the sssd package, as shipped with Red Hat Enterprise Linux 5 and 6. -- This issue affects the versions of the sssd package, as shipped with Fedora release of 16 and 17. -- This issue affects the version of the sssd package, as shipped with Fedora EPEL 5.
This issue has been assigned CVE-2013-0219
Created sssd tracking bugs for this issue Affects: fedora-all [bug 903145] Affects: epel-5 [bug 903146]
sssd-1.9.4-2.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report.
Acknowledgements: This issue was discovered by Florian Weimer of the Red Hat Product Security Team.
sssd-1.8.6-1.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report.
This issue has been addressed in following products: Red Hat Enterprise Linux 6 Via RHSA-2013:0508 https://rhn.redhat.com/errata/RHSA-2013-0508.html
This issue has been addressed in following products: Red Hat Enterprise Linux 5 Via RHSA-2013:1319 https://rhn.redhat.com/errata/RHSA-2013-1319.html
Statement: (none)