Secunia

Jonas Thambert has reported a security issue in SimpleCDR-X, which can be exploited by malicious, local users to gain access to sensitive information.

The security issue is caused due to the application creating a temporary copy of the ISO image with insecure file permissions in "/tmp/.temp". This may allow malicious users to gain access to the contents of the image when it is being written to the CD.

Successful exploitation requires that the user has not changed the default configuration of the temporary directory.

The security issue has been reported in version 1.3.3. Prior versions may also be affected.

Solution
Configure the user's home directory or a more secure location as the temporary directory.

Provided and/or discovered by
Jonas Thambert

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area