Security Advisory SA43225 - Conky "/tmp/.cesf" Insecure Temporary File Security Issue

Secunia

Blog

Secunia Advisory SA43225

Conky "/tmp/.cesf" Insecure Temporary File Security Issue

Secunia Advisory

SA43225

Release Date

2011-02-07

Last Update

2011-10-11

Popularity

1,824 view

Comments

0 comments

Criticality level

Not critical

Impact

Privilege escalation

Where

Local system

Authentication level

This information is available to Secunia VIM customers

Report reliability

This information is available to Secunia VIM customers

Solution Status

Vendor Workaround

Systems affected

This information is available to Secunia VIM customers

Approve distribution

This information is available to Secunia VIM customers

Software:

Conky 1.x

Secunia CVSS Score

This information is available to Secunia VIM Customers

CVE Reference(s)

CVE-2011-3616 CVSS score available to Secunia VIM customers

Description

A security issue has been reported in Conky, which can be exploited by malicious, local users to perform certain actions with escalated privileges.

The security issue is caused due to Conky's "eve" module using the "/tmp/.cesf" file in an insecure manner, which can be exploited to e.g. overwrite arbitrary files with the privileges of the user running Conky.

Successful exploitation requires that the "eve" module is compiled and configured.

The security issue is reported in version 1.8.1. Other versions may also be affected.

Solution
Fixed in the GIT repository.

Provided and/or discovered by
Reported in an Ubuntu bug by segooon.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Ubuntu Bug #607309:
https://bugs.launchpad.net/ubuntu/+source/conky/+bug/607309

http://git.omp.am/?p=conky.git;a=commitdiff;h=ac4a3682aecb9d6466fea4aebb183b5f8f632905
http://git.omp.am/?p=conky.git;a=commitdiff;h=70b6f35a846f7b85bd11e66c1f23feee6b369688

Deep Links
Links available to Secunia VIM customers

Do you have additional information related to this advisory?

Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com

Subject: Conky "/tmp/.cesf" Insecure Temporary File Security Issue

No posts yet

Secunia Advisory SA43225

Conky "/tmp/.cesf" Insecure Temporary File Security Issue

Do you have additional information related to this advisory?

You must be logged in to post a comment.

Secunia Customer Login

Not a customer already?