Sign-up

ID

VAR-200412-0228


CVE

CVE-2004-2502


TITLE

IM-Switch Unsafe Temporary File Handling Vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200412-1002

DESCRIPTION

im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file. It is reported that im-switch is prone to a local insecure temporary file handling symbolic link vulnerability. The im-switch utility will write to this temporary file before verifying its existence; this would facilitate a symbolic link attack. An attacker may exploit this issue to corrupt arbitrary files. This corruption may potentially result in the elevation of privileges, or in a system wide denial of service. Fedora Core is a Linux system distributed by RedHat. \'\'/usr/bin/im-switch\'\'use \"/tmp/imswitcher$$\" as a temporary file, but because the /tmp/ directory is writable and $$(PID) can be cloud-registered, Therefore, attackers can use symbolic links to destroy important files in the system, which may cause privilege escalation

Trust: 1.26

sources: NVD: CVE-2004-2502 // BID: 10717 // VULHUB: VHN-10930

AFFECTED PRODUCTS

vendor:im switchmodel:im-switchscope:eqversion:*

Trust: 1.0

vendor:im switchmodel:im-switchscope: - version: -

Trust: 0.9

vendor:redhatmodel:fedora core2scope: - version: -

Trust: 0.3

vendor:redhatmodel:fedora core1scope: - version: -

Trust: 0.3

sources: BID: 10717 // CNNVD: CNNVD-200412-1002 // NVD: CVE-2004-2502

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2004-2502
value: LOW

Trust: 1.0

CNNVD: CNNVD-200412-1002
value: LOW

Trust: 0.6

VULHUB: VHN-10930
value: LOW

Trust: 0.1

nvd@nist.gov: CVE-2004-2502
severity: LOW
baseScore: 2.1
vectorString: AV:L/AC:L/AU:N/C:N/I:P/A:N
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-10930
severity: LOW
baseScore: 2.1
vectorString: AV:L/AC:L/AU:N/C:N/I:P/A:N
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-10930 // CNNVD: CNNVD-200412-1002 // NVD: CVE-2004-2502

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2004-2502

THREAT TYPE

local

Trust: 0.9

sources: BID: 10717 // CNNVD: CNNVD-200412-1002

TYPE

access verification error

Trust: 0.6

sources: CNNVD: CNNVD-200412-1002

EXPLOIT AVAILABILITY

sources:
            
            
            VULHUB: VHN-10930

EXTERNAL IDS
db:BIDid:10717
Trust: 2.0
db:SECUNIAid:12037
Trust: 1.7
db:NVDid:CVE-2004-2502
Trust: 1.7
db:OSVDBid:7772
Trust: 1.7
db:CNNVDid:CNNVD-200412-1002
Trust: 0.7
db:XFid:16682
Trust: 0.6
db:NSFOCUSid:6703
Trust: 0.6
db:SEEBUGid:SSVID-78010
Trust: 0.1
db:EXPLOIT-DBid:24278
Trust: 0.1
db:VULHUBid:VHN-10930
Trust: 0.1
sources:
            
            
            VULHUB: VHN-10930 // 
            
            
            
            BID: 10717 // 
            
            
            
            CNNVD: CNNVD-200412-1002 // 
            
            
            
            NVD: CVE-2004-2502

REFERENCES
url:http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126940
Trust: 2.0
url:http://www.securityfocus.com/bid/10717
Trust: 1.7
url:http://packetstormsecurity.org/0407-advisories/fedora_im-switch_tempfile_race.txt
Trust: 1.7
url:http://www.osvdb.org/7772
Trust: 1.7
url:http://secunia.com/advisories/12037
Trust: 1.7
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/16682
Trust: 1.1
url:http://xforce.iss.net/xforce/xfdb/16682
Trust: 0.6
url:http://www.nsfocus.net/vulndb/6703
Trust: 0.6
sources:
            
            
            VULHUB: VHN-10930 // 
            
            
            
            BID: 10717 // 
            
            
            
            CNNVD: CNNVD-200412-1002 // 
            
            
            
            NVD: CVE-2004-2502

CREDITS
SEKINE Tatsuo
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-200412-1002

SOURCES
db:VULHUBid:VHN-10930
db:BIDid:10717
db:CNNVDid:CNNVD-200412-1002
db:NVDid:CVE-2004-2502

LAST UPDATE DATE
2024-08-14T15:20:13.442000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-10930date:2017-07-11T00:00:00
db:BIDid:10717date:2004-07-13T00:00:00
db:CNNVDid:CNNVD-200412-1002date:2005-11-11T00:00:00
db:NVDid:CVE-2004-2502date:2017-07-11T01:31:57.420

SOURCES RELEASE DATE
db:VULHUBid:VHN-10930date:2004-12-31T00:00:00
db:BIDid:10717date:2004-07-13T00:00:00
db:CNNVDid:CNNVD-200412-1002date:2004-07-13T00:00:00
db:NVDid:CVE-2004-2502date:2004-12-31T05:00:00