FreeBSD : mod_dosevasive -- insecure temporary file creation (88ff90f2-6e43-11d9-8c87-000a95bc6fae)

This script is Copyright (C) 2005-2014 Tenable Network Security, Inc.


Synopsis :

The remote FreeBSD host is missing a security-related update.

Description :

An LSS Security Advisory reports :

When a denial of service attack is detected, mod_dosevasive will,
among other things, create a temporary file which it will use to trace
actions from the offensive IP address. This file is insecurely created
in /tmp and it's name is easily predictable.

It is then easy for an attacker to create arbitrary files in any
directory that the user under which apache runs has privileges to
write.

[...] once the target file is opened, there is a race attack (although
difficult to exploit) which can lead to mod_dosevasive overwriting any
file that the user under which apache runs has privileges to write.

See also :

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=77513
http://www.nessus.org/u?a202fd18
http://www.nessus.org/u?6297a2d6

Solution :

Update the affected package.

Risk factor :

High

Family: FreeBSD Local Security Checks

Nessus Plugin ID: 19018 (freebsd_pkg_88ff90f26e4311d98c87000a95bc6fae.nasl)

Bugtraq ID:

CVE ID:

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now