Joined: 12 May 2004
|Posted: Sun Oct 07, 2007 10:26 pm Post subject: [ GLSA 200710-05 ] QGit: Insecure temporary file creation
|Gentoo Linux Security Advisory
Title: QGit: Insecure temporary file creation (GLSA 200710-05)
Date: October 07, 2007
A vulnerability has been discovered in QGit allowing local users to overwrite arbitrary files and execute arbitrary code with another user's rights.
QGit is a graphical interface to git repositories that allows you to browse revisions history, view patch content and changed files.
Vulnerable: < 1.5.7
Unaffected: >= 1.5.7
Architectures: All supported architectures
Raphael Marichez discovered that the DataLoader::doStart() method creates temporary files in an insecure manner and executes them.
A local attacker could perform a symlink attack, possibly overwriting files or executing arbitrary code with the rights of the user running QGit.
There is no known workaround at this time.
All QGit users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-util/qgit-1.5.7"