OSVDB ID: 6381 Title: AOL Instant Messenger (AIM) Sniff aimSniff.pl Symlink Arbitrary File Overwrite |
Info |
|
|
Dates |
||||
|
|
Description |
AIMsniff contains a flaw that may allow a malicious user to overwrite any file on your filesystem. The issue is triggered when AIMsniff exists, and writes to /tmp/AS.log. It is possible that the flaw may allow a race condition resulting in a loss of integrity and availability. |
Classification |
Location:
Local Access Required
Attack Type: Denial of Service, Race Condition Impact: Loss of Integrity, Loss of Availability Exploit: Exploit Public Disclosure: OSVDB Verified |
Solution |
Upgrade to version 0.9d or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround(s): in aimsniff.pl, change the line saying: open(LOG,">/tmp/AS.log") or die "Could not open debug file: $^E\n"; to: unlink("/tmp/AS.log"); sysopen(FH,"/tmp/AS.log",O_WRONLY|O_EXECL|O_CREAT,0600); (or) Change (at line 55): my $debug2=1; to: my $debug2=0; |
Products |
|
References |
|
Credit |
|
ptraced.net -