REDHAT-BUG-797878: Low severity Linux Foundation iproute2 vulnerability
Multiple (by checking for ATM technology support, checking for Xtables extension support, checking for setns() system call support, and in dhcp-client-script example script) insecure temporary file use cases were found in iproute. A local attacker could use this flaw to conduct symbolic link attacks (modify or remove files via specially-crafted link names).
Upstream patches: [1] http://git.kernel.org/?p=linux/kernel/git/shemminger/iproute2.git;a=commitdiff;h=e557d1ac3a156ba7521ba44b0b412af4542f83f8 [2] http://git.kernel.org/?p=linux/kernel/git/shemminger/iproute2.git;a=commitdiff;h=20ed7b24df05eadf83168d1d0ce0052a31380928
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-797878?
The severity of REDHAT-BUG-797878 is categorized as low.
How do I fix REDHAT-BUG-797878?
To fix REDHAT-BUG-797878, ensure that insecure temporary files are not used in the iproute code.
What type of attacks could be conducted via REDHAT-BUG-797878?
A local attacker could conduct symbolic link attacks due to the insecure temporary file use cases found in iproute.
What software is affected by REDHAT-BUG-797878?
The vulnerable software associated with REDHAT-BUG-797878 is Linux Foundation iproute2.
When was REDHAT-BUG-797878 published?
REDHAT-BUG-797878 was published on February 27, 2012.