• info
• discussion
• exploit
• solution
• references

Apache Utilities Insecure Temporary File Creation Vulnerability

Solution:
Ubuntu Linux has made advisory USN-65-1 along with fixes available dealing with this issue. Please see the referenced advisory for more information.


Apache Software Foundation Apache 1.3.31

• Ubuntu apache-common_1.3.31-6ubuntu0.4_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/a/apache/apache-common_1.3 .31-6ubuntu0.4_amd64.deb


• Ubuntu apache-common_1.3.31-6ubuntu0.4_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/a/apache/apache-common_1.3 .31-6ubuntu0.4_i386.deb


• Ubuntu apache-common_1.3.31-6ubuntu0.4_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/a/apache/apache-common_1.3 .31-6ubuntu0.4_powerpc.deb


• Ubuntu apache-dbg_1.3.31-6ubuntu0.4_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-dbg_1. 3.31-6ubuntu0.4_amd64.deb


• Ubuntu apache-dbg_1.3.31-6ubuntu0.4_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-dbg_1. 3.31-6ubuntu0.4_i386.deb


• Ubuntu apache-dbg_1.3.31-6ubuntu0.4_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-dbg_1. 3.31-6ubuntu0.4_powerpc.deb


• Ubuntu apache-dev_1.3.31-6ubuntu0.4_all.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/a/apache/apache-dev_1.3.31 -6ubuntu0.4_all.deb


• Ubuntu apache-doc_1.3.31-6ubuntu0.4_all.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-doc_1. 3.31-6ubuntu0.4_all.deb


• Ubuntu apache-perl_1.3.31-6ubuntu0.4_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-perl_1 .3.31-6ubuntu0.4_amd64.deb


• Ubuntu apache-perl_1.3.31-6ubuntu0.4_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-perl_1 .3.31-6ubuntu0.4_i386.deb


• Ubuntu apache-perl_1.3.31-6ubuntu0.4_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-perl_1 .3.31-6ubuntu0.4_powerpc.deb


• Ubuntu apache-ssl_1.3.31-6ubuntu0.4_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-ssl_1. 3.31-6ubuntu0.4_amd64.deb


• Ubuntu apache-ssl_1.3.31-6ubuntu0.4_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-ssl_1. 3.31-6ubuntu0.4_i386.deb


• Ubuntu apache-ssl_1.3.31-6ubuntu0.4_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache-ssl_1. 3.31-6ubuntu0.4_powerpc.deb


• Ubuntu apache-utils_1.3.31-6ubuntu0.4_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/a/apache/apache-utils_1.3. 31-6ubuntu0.4_amd64.deb


• Ubuntu apache-utils_1.3.31-6ubuntu0.4_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/a/apache/apache-utils_1.3. 31-6ubuntu0.4_i386.deb


• Ubuntu apache-utils_1.3.31-6ubuntu0.4_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/a/apache/apache-utils_1.3. 31-6ubuntu0.4_powerpc.deb


• Ubuntu apache_1.3.31-6ubuntu0.4_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache_1.3.31 -6ubuntu0.4_amd64.deb


• Ubuntu apache_1.3.31-6ubuntu0.4_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache_1.3.31 -6ubuntu0.4_i386.deb


• Ubuntu apache_1.3.31-6ubuntu0.4_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/apache_1.3.31 -6ubuntu0.4_powerpc.deb


• Ubuntu libapache-mod-perl_1.29.0.2-14ubuntu0.1_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/libapache-mod -perl_1.29.0.2-14ubuntu0.1_amd64.deb


• Ubuntu libapache-mod-perl_1.29.0.2-14ubuntu0.1_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/libapache-mod -perl_1.29.0.2-14ubuntu0.1_i386.deb


• Ubuntu libapache-mod-perl_1.29.0.2-14ubuntu0.1_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/a/apache/libapache-mod -perl_1.29.0.2-14ubuntu0.1_powerpc.deb