CWE
59
Advisory Published
CVE Published
CVE Published
Updated

CVE-2015-5700

First published: Mon Jan 12 2015(Updated: )

It was reported [1] that mktexlsr script uses /tmp in an insecure way. Part of original report: ... This is how mktexlsr uses temporary files (with boring parts snipped): treefile="${TMPDIR-/tmp}/mktexlsrtrees$$.tmp" # ... while test $# -gt 0; do # ... (umask 077 if echo "$1" &gt;&gt;"$treefile"; then :; else echo "$progname: $treefile: could not append to arg file, goodbye." &gt;&amp;2 exit 1 fi # ... done This is insecure because the filename is predictable and, more importantly, the program doesn't fail atomically if the file already exists. ... Suggested patch is attached. [1]: <a href="https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775139">https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775139</a>

Credit: cve@mitre.org cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Tug Texlive=20100722
Tug Texlive=20110705
Tug Texlive=20120701
Tug Texlive=20130530
Tug Texlive=20140525
ubuntu/texlive-bin<2013.20130729.30972-2ubuntu0.1
2013.20130729.30972-2ubuntu0.1
ubuntu/texlive-bin<2014.20140926.35254-5
2014.20140926.35254-5
debian/texlive-bin
2020.20200327.54578-7+deb11u1
2022.20220321.62855-5.1+deb12u1
2024.20240313.70630+ds-4

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Frequently Asked Questions

  • What is CVE-2015-5700?

    CVE-2015-5700 is a vulnerability that allows local users to write to arbitrary files via a symlink attack in mktexlsr revision 22855 through revision 36625 as packaged in texlive.

  • Which software versions are affected by CVE-2015-5700?

    The texlive package versions 2014.20140926.35254-5, 2013.20130729.30972-2ubuntu0.1, 20100722, 20110705, 20120701, 20130530, and 20140525 are affected by CVE-2015-5700.

  • How can this vulnerability be exploited?

    This vulnerability can be exploited by local users who can create a symlink attack to write to arbitrary files.

  • What is the severity of CVE-2015-5700?

    The severity of CVE-2015-5700 is medium with a severity value of 6.1.

  • Where can I find more information about CVE-2015-5700?

    You can find more information about CVE-2015-5700 at the following references: [1] [2] [3].

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203