FreeBSD : globus -- Multiple tmpfile races (5039ae61-2c9f-11db-8401-000ae42e9b93)

low Nessus Plugin ID 22240

Synopsis

The remote FreeBSD host is missing a security-related update.

Description

The Globus Alliance reports :

The proxy generation tool (grid-proxy-init) creates the file, secures the file to provide access only to owner and writes proxy to the file.
A race condition exists between the opening of the proxy credentials file, and making sure it is safe file to write to. The checks to ensure this file is accessible only to the owner take place using the filename after the file is opened for writing, but before any data is written.

Various components of the toolkit use files in shared directories to store information, some being sensitive information. For example, the tool to create proxy certificates, stores the generated proxy certificate by default in /tmp. Specific vulnerabilities in handling such files were reported in myproxy-admin-adduser, grid-ca-sign and grid-security-config.

Solution

Update the affected package.

Plugin Details

Severity: Low

ID: 22240

File Name: freebsd_pkg_5039ae612c9f11db8401000ae42e9b93.nasl

Version: 1.15

Type: local

Family: FreeBSD Local Security Checks

Published: 8/21/2006

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.8

CVSS v2

Risk Factor: Low

Base Score: 3.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:globus, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 8/15/2006

Vulnerability Publication Date: 8/8/2006

Reference Information

CVE: CVE-2006-4232, CVE-2006-4233

Detections

Analytics