Title : Redhat Security Update Fixes LM Sensors Insecure Temporary Files VUPEN ID : VUPEN/ADV-2005-2384 CVE ID : CVE-2005-2672
Rated as : Low Risk
Remotely Exploitable : No Locally Exploitable : Yes Release Date : 2005-11-10
Technical Description
Redhat has released updated packages to correct a vulnerability identified in LM-Sensors. This flaw is due to an error in the "pwmconfig" script that creates the temporary file "/tmp/fancontrol" insecurely, which may be exploited by local attackers to overwrite or create arbitrary files with the privileges of the user running the vulnerable script. For additional information, see : VUPEN/ADV-2005-1492
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback If you have additional information or corrections for this security advisory please submit them via our contact form.
