Jan Braun has reported a vulnerability in fbida, which can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges.

The "fbgs" script creates temporary files insecurely in the "/var/tmp" directory when the "TMPDIR" environment variable isn't defined. This can be exploited to create or overwrite arbitrary files via symlink attacks with the privileges of a user running the vulnerable script.

The vulnerability has been reported in versions 2.01 and 2.03. Other versions may also be affected.

Solution
Always define a secure directory in the "TMPDIR" environment variable before running the script.
Further details available in Customer Area

Provided and/or discovered by
Jan Braun

Changelog
Further details available in Customer Area

Original Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=361370

Deep Links
Links available in Customer Area