CVE-2015-0233: Medium severity 389 directory server vulnerability
Kurt Seifried of Red Hat Product Security reports:
There are several temporary file creation vulnerabilities:
In the file
./389-admin-1.1.36/admserv/newinst/src/AdminServer.pm.in
my $secfilebackupdir = "/tmp/adm-sec-files." . $$;
and in the file:
./389-admin-1.1.36/lib/libadmin/httpcon.c
char dbd = "/tmp/httptrace.%d";
The perl code should use mkstemp() and the C code should use mkstemp().
These issues are only locally exploitable and require administrative action in order to exploit.
Other sources
Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-0233?
The severity of CVE-2015-0233 is categorized as medium due to the potential for unauthorized file access.
How do I fix CVE-2015-0233?
To fix CVE-2015-0233, update to version 1.1.38 or later of the 389 Administration Server software.
What are the main vulnerabilities associated with CVE-2015-0233?
CVE-2015-0233 primarily involves temporary file creation vulnerabilities that can lead to information disclosure.
Which software versions are affected by CVE-2015-0233?
CVE-2015-0233 affects versions of the 389 Administration Server up to and including 1.1.37.
Who reported CVE-2015-0233?
CVE-2015-0233 was reported by Kurt Seifried of Red Hat Product Security.