Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Audacity creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. This issue can also be leveraged to delete arbitrary files or directories via a symlink attack.

The updated package fixes the issue.

A local attacker could exploit Audacity's insecure handling of the directory for temporary files to conduct symlink attacks in order to delete arbitrary files and directories with the privileges of the user running Audacity.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200803-03 (Audacity: Insecure temporary file creation)

    Viktor Griph reported that the 'AudacityApp::OnInit()' method in file     src/AudacityApp.cpp does not handle temporary files properly.
  Impact :

    A local attacker could exploit this vulnerability to conduct symlink     attacks to delete arbitrary files and directories with the privileges     of the user running Audacity.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
37588	Mandriva Linux Security Advisory : audacity (MDVSA-2008:074)	Nessus	Mandriva Local Security Checks	medium
32202	Fedora 7 : audacity-1.3.2-21.fc7 (2008-3511)	Nessus	Fedora Local Security Checks	medium
32198	Fedora 8 : audacity-1.3.2-21.fc8 (2008-3456)	Nessus	Fedora Local Security Checks	medium
31330	GLSA-200803-03 : Audacity: Insecure temporary file creation	Nessus	Gentoo Local Security Checks	medium

Detections

Analytics

CVE-2007-6061

medium

Tenable Plugins

medium

medium

medium

medium