UUDeview: Insecure temporary file creation

1. Gentoo Linux Security Advisory

Package	Vulnerable versions	Unaffected versions	Architecture(s)
app-text/uudeview	< 0.5.20-r1	>= 0.5.20-r1	All supported architectures
news-nntp/nzbget	< 0.4.0	>= 0.4.0	All supported architectures

Related bugreports: #222275, #224193

A vulnerability in UUDeview may allow local attackers to conduct symlink attacks.

2. Impact Information

UUdeview is encoder and decoder supporting various binary formats. NZBGet is a command-line based binary newsgrabber supporting .nzb files.

UUdeview makes insecure usage of the tempnam() function when creating temporary files. NZBGet includes a copy of the vulnerable code.

A local attacker could exploit this vulnerability to overwrite arbitrary files on the system.

3. Resolution Information

There is no known workaround at this time.

All UUDview users should upgrade to the latest version:

Code Listing 3.1: Resolution

# emerge --sync
# emerge --ask --oneshot --verbose ">=app-text/uudeview-0.5.20-r1"

All NZBget users should upgrade to the latest version:

Code Listing 3.2: Resolution

# emerge --sync
# emerge --ask --oneshot --verbose ">=news-nntp/nzbget-0.4.0"

4. References

Updated August 11, 2008

Summary: This is a Gentoo Linux Security Advisory

Security Team
Contact Address

Donate to support our development efforts.