Secunia

Jens Steube has reported two vulnerabilities in remstats, which can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges, and by malicious people to potentially compromise a vulnerable system.

1) Temporary files are created insecurely when processing uptime data. This can be exploited via symlink attacks to create or overwrite arbitrary files with the privileges of the user running remstats.

2) An input validation error in the remoteping service can be exploited to execute arbitrary commands.

Solution
Filter access to the remoteping service, and grant only trusted users access to affected systems.

Provided and/or discovered by
Jens Steube

Deep Links
Links available in Customer Area