FreeBSD : ikiwiki -- improper symlink verification vulnerability (31d9fbb4-9d09-11dc-a29d-0016d325a0ed)

NASLDB: FreeBSD : ikiwiki -- improper symlink verification vulnerability (31d9fbb4-9d09-11dc-a29d-0016d325a0ed)

General

ID: 28349
Name: FreeBSD : ikiwiki — improper symlink verification vulnerability (31d9fbb4-9d09-11dc-a29d-0016d325a0ed)

Summary: Checks for updated package in pkg_info output

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: –
CVSS Temporal Vector: –

Port: 0
Family: FreeBSD Local Security Checks
Type: Local

Description

The ikiwiki development team reports :

Ikiwiki did not check if path to the srcdir to contained a symlink. If
an attacker had commit access to the directories in the path, they
could change it to a symlink, causing ikiwiki to read and publish
files that were not intended to be published. (But not write to them
due to other checks.)

Exploiting

Exploit Available: –
Exploitability Ease: –

Sources

CVE: –
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2007/11/26
Patch Release: 2007/11/27
Plugin Release: 2007/11/29

Plugin

Version: 1.8
Filename: freebsd_pkg_31d9fbb49d0911dca29d0016d325a0ed.nasl
Filesize: 4323 bytes
MD5 Hash: 413ffc49c1c2fc4a97c3201fa35beaaa

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/FreeBSD/release", "Host/FreeBSD/pkg_info
Dependencies: "ssh_get_info.nasl"