REDHAT-BUG-678913: Race Condition
A race condition was found in the way the secure implementation of Ruby fileutils' remove system entries method (removeentrysecure()), removed directory trees. A local attacker could use this flaw to conduct symbolic link attacks, leading to removal of arbitrary files or directories on the system.
References: [1] http://www.ruby-lang.org/en/news/2011/02/18/fileutils-is-vulnerable-to-symlink-race-attacks/
Upstream patch (against trunk): [2] http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=30896
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-678913?
The severity of REDHAT-BUG-678913 is considered high due to the potential for arbitrary file or directory removal via symbolic link attacks.
How do I fix REDHAT-BUG-678913?
To fix REDHAT-BUG-678913, update to the latest version of Ruby FileUtils that addresses the race condition issue.
Who is affected by REDHAT-BUG-678913?
All users of Ruby FileUtils implementing the remove_entry_secure() method are affected by REDHAT-BUG-678913.
What kind of attack is enabled by REDHAT-BUG-678913?
REDHAT-BUG-678913 enables symbolic link attacks, allowing local attackers to manipulate directory trees.
What happens if I'm vulnerable to REDHAT-BUG-678913?
If vulnerable to REDHAT-BUG-678913, an attacker could remove arbitrary files or directories on your system.