Secunia

Steve Kemp has reported two security issues in XWine, which can be exploited by malicious, local users to perform certain actions with escalated privileges.

1) The temporary file "/tmp/temporaire" is used in an insecure manner. This can be exploited to e.g. truncate arbitrary files with the privileges of a user running xwine via symlink attacks.

2) The application sets insecure permissions for the configuration file "/etc/wine/config". This can potentially be exploited to execute arbitrary commands with the privileges of a user running wine by e.g. changing certain configuration settings.

The vulnerabilities are reported in 1.0.1-1.1. Other versions may also be affected.

Solution
Restrict access to trusted users only.

Provided and/or discovered by
Steve Kemp

Changelog
Further details available in Customer Area

Original Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=468050

Deep Links
Links available in Customer Area