SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Generic)  >   IBM iNotes and Domino Vendors:   IBM
IBM Lotus Notes for Linux Has Unsafe Folder Permissions Let Local Users Gain Root Privileges
SecurityTracker Alert ID:  1019009
SecurityTracker URL:  http://securitytracker.com/id/1019009
CVE Reference:   CVE-2007-6594   (Links to External Site)
Updated:  Jan 4 2008
Original Entry Date:  Nov 29 2007
Impact:   Execution of arbitrary code via local system, Modification of system information, Root access via local system
Vendor Confirmed:  Yes  
Version(s): Lotus Notes 8 for Linux
Description:   Two vulnerabilities were reported in IBM Lotus Notes for Linux. A local user can obtain root privileges on the target system.

The Lotus Notes 8 for Linux installer program creates files with unsafe permissions.

Notes 8 for Linux installation files may be assigned unsafe permissions if extracted by a root user in a directory that allows non-root users to read and execute files. A local user may be able to modify the installation kit so that when a root user performs subsequent installations, arbitrary code will be executed with root privileges.

The 'setup.sh' script sets the permissions on the 'installdata' file to world read, write, and execute (777 permissions). A local user can modify the file so that when a root user executes the script, arbitrary code will be executed with root privileges.

Impact:   A local user can obtain root privileges on the target system.
Solution:   The vendor plans to issued a fix in an upcoming version (8.0.1).

The vendor has described a workaround in their advisory.

The IBM advisory is available at:

http://www-1.ibm.com/support/docview.wss?uid=swg21289273

Vendor URL:  www-1.ibm.com/support/docview.wss?uid=swg21289273 (Links to External Site)
Cause:   Access control error
Underlying OS:  Linux (Any)

Message History:   None.


 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2021, SecurityGlobal.net LLC