Joined: 12 May 2004
|Posted: Wed Sep 09, 2009 7:26 pm Post subject: [ GLSA 200909-08 ] C* music player: Insecure temporary file
|Gentoo Linux Security Advisory
Title: C* music player: Insecure temporary file usage (GLSA 200909-08)
Date: September 09, 2009
An insecure temporary file usage has been reported in the C* music player,
allowing for symlink attacks.
The C* Music Player (cmus) is a modular and very configurable
ncurses-based audio player.
Vulnerable: < 2.2.0-r1
Unaffected: >= 2.2.0-r1
Architectures: All supported architectures
Dmitry E. Oboukhov reported that cmus-status-display does not handle
the "/tmp/cmus-status" temporary file securely.
A local attacker could perform symlink attacks to overwrite arbitrary
files with the privileges of the user running the application.
There is no known workaround at this time.
All C* music player users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=media-sound/cmus-2.2.0-r1"
Last edited by GLSA on Sun Nov 22, 2009 4:29 am; edited 1 time in total