IBM Lotus Notes for Linux Has Unsafe Folder Permissions Let Local Users Gain Root Privileges
|
|
SecurityTracker Alert ID: 1019009
|
|
SecurityTracker URL: http://securitytracker.com/id?1019009
|
|
CVE Reference: CVE-2007-6594
(Links to External Site)
|
Updated: Jan 4 2008
|
Original Entry Date: Nov 29 2007
|
Impact: Execution of arbitrary code via local system, Modification of system information, Root access via local system
|
Vendor Confirmed: Yes
|
Version(s): Lotus Notes 8 for Linux
|
Description: Two vulnerabilities were reported in IBM Lotus Notes for Linux. A local user can obtain root privileges on the target system.
The Lotus Notes 8 for Linux installer program creates files with unsafe permissions.
Notes 8 for Linux installation files may
be assigned unsafe permissions if extracted by a root user in a directory that allows non-root users to read and execute files.
A local user may be able to modify the installation kit so that when a root user performs subsequent installations, arbitrary code
will be executed with root privileges.
The 'setup.sh' script sets the permissions on the 'installdata' file to world read, write,
and execute (777 permissions). A local user can modify the file so that when a root user executes the script, arbitrary code will
be executed with root privileges.
|
Impact: A local user can obtain root privileges on the target system.
|
Solution: The vendor plans to issued a fix in an upcoming version (8.0.1).
The vendor has described a workaround in their advisory.
The IBM advisory is available at:
http://www-1.ibm.com/support/docview.wss?uid=swg21289273
|
Vendor URL: www-1.ibm.com/support/docview.wss?uid=swg21289273 (Links to External Site)
|
Cause: Access control error
|
Underlying OS: Linux (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Wed, 28 Nov 2007 22:30:12 -0500
Subject: Lotus Notes
|
http://www-1.ibm.com/support/docview.wss?uid=swg21289273
|
|
