FreeBSD : heartbeat -- insecure temporary file creation vulnerability (f6447303-9ec9-11da-b410-000e0c2e438a)

Low Nessus Plugin ID 21538


The remote FreeBSD host is missing a security-related update.


Eric Romang reports a temporary file creation vulnerability within heartbeat. The vulnerability is caused by hard-coded temporary file usage. This can cause an attacker to create an arbitrary symlink causing the application to overwrite the symlinked file with the permissions of the user executing the application.


Update the affected package.

See Also

Plugin Details

Severity: Low

ID: 21538

File Name: freebsd_pkg_f64473039ec911dab410000e0c2e438a.nasl

Version: $Revision: 1.10 $

Type: local

Published: 2006/05/13

Modified: 2014/05/02

Dependencies: 12634

Risk Information

Risk Factor: Low


Base Score: 2.1

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:heartbeat, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 2006/02/16

Vulnerability Publication Date: 2005/07/12

Reference Information

CVE: CVE-2005-2231