Technical Description

Multiple vulnerabilities have been identified in Fedora, which could be exploited by attackers to cause a denial of service.

The first issue is caused by an error in the "usr/mgmt_ipc.c" file within open-iscsi (iscsi-initiator-utils) that checks the client's UID on the listening AF_LOCAL socket instead of the new connection, which could be exploited by attackers to access the management interface and cause a denial of service.

The second vulnerability is caused by an error in the "usr/log.c" file within open-iscsi (iscsi-initiator-utils) that uses a semaphore with insecure permissions (world-writable/world-readable) when managing log messages using shared memory, which could be exploited by malicious users to cause a denial of service.

Affected Products

Fedora Core 5
Fedora Core 6

Solution

Upgrade the affected packages :

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/

63ad1c7a1834cfbf1f1748869d209295f74dd24b SRPMS/iscsi-initiator-utils-5.2.0.865-0.0.fc5.src.rpm
63ad1c7a1834cfbf1f1748869d209295f74dd24b noarch/iscsi-initiator-utils-5.2.0.865-0.0.fc5.src.rpm
c746f21a0a20c8ae5f63ae0d8b130eb5df97f0ad ppc/iscsi-initiator-utils-5.2.0.865-0.0.fc5.ppc.rpm
7e8f09f47cb86f6de49418793718d535ace6c999 ppc/debug/iscsi-initiator-utils-debuginfo-5.2.0.865-0.0.fc5.ppc.rpm
9072cf852356b3db894f570210fe2bbc3879ad39 x86_64/debug/iscsi-initiator-utils-debuginfo-5.2.0.865-0.0.fc5.x86_64.rpm
afa4f8d10eb07c2ce23a6f3d50652b3d30d6eb97 x86_64/iscsi-initiator-utils-5.2.0.865-0.0.fc5.x86_64.rpm
e9ee6329937506df286d9b41c556eba793fdd642 i386/debug/iscsi-initiator-utils-debuginfo-5.2.0.865-0.0.fc5.i386.rpm
44fbc3d675193dd635a8fd120a84ef86d076aeb0 i386/iscsi-initiator-utils-5.2.0.865-0.0.fc5.i386.rpm

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

32f4c13c3a3684287d80a75a186b39197f7412ab SRPMS/iscsi-initiator-utils-6.2.0.865-0.0.fc6.src.rpm
32f4c13c3a3684287d80a75a186b39197f7412ab noarch/iscsi-initiator-utils-6.2.0.865-0.0.fc6.src.rpm
40c034705af176e7be8280ecd55b974b3ac19b79 ppc/iscsi-initiator-utils-6.2.0.865-0.0.fc6.ppc.rpm
f4487d51ce3c47ad2db351e7a46d4eca160fe101 ppc/debug/iscsi-initiator-utils-debuginfo-6.2.0.865-0.0.fc6.ppc.rpm
2f2d7bf64c5b21ff0eb4b061af9ba159fe0d7ffb x86_64/debug/iscsi-initiator-utils-debuginfo-6.2.0.865-0.0.fc6.x86_64.rpm
065f37f65c9444093a682c1938288d885b092fc3 x86_64/iscsi-initiator-utils-6.2.0.865-0.0.fc6.x86_64.rpm
ad6d57abcc76a22a8db88db0a049dd0386492f1d i386/debug/iscsi-initiator-utils-debuginfo-6.2.0.865-0.0.fc6.i386.rpm
60e2d9a8d0a8b89229509dc5c786b450b9b91151 i386/iscsi-initiator-utils-6.2.0.865-0.0.fc6.i386.rpm

References

http://www.vupen.com/english/advisories/2007/2195
https://www.redhat.com/archives/fedora-package-announce/2007-June/msg00261.html
https://www.redhat.com/archives/fedora-package-announce/2007-June/msg00262.html

Credits

Vulnerabilities reported by Olaf Kirch (Oracle).

ChangeLog

2007-06-15 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.