REDHAT-BUG-545439: Low severity gnu coreutils vulnerability
The "distcheck" Makefile rule in coreutils 5.2.1 through to 8.1 did use unsafe (predictable) temporary directory location for performing own tasks. This might allow local attacker to conduct symlink attacks under certain circumstances.
Upstream patch: --------------- http://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=ae034822c535fa5
Credit: ------- Jim Meyering
CVE Request: ------------ http://www.openwall.com/lists/oss-security/2009/12/08/4
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-545439?
The vulnerability REDHAT-BUG-545439 has been classified as a moderate risk due to its potential for local symlink attacks.
How do I fix REDHAT-BUG-545439?
To fix REDHAT-BUG-545439, upgrade GNU coreutils to a version later than 8.1.
What versions of coreutils are affected by REDHAT-BUG-545439?
GNU coreutils versions from 5.2.1 to 8.1 are affected by REDHAT-BUG-545439.
What type of attack is possible with REDHAT-BUG-545439?
REDHAT-BUG-545439 allows local attackers to conduct symlink attacks under certain conditions.
Who is affected by REDHAT-BUG-545439?
Users and systems running vulnerable versions of GNU coreutils are at risk due to REDHAT-BUG-545439.