• info
• discussion
• exploit
• solution
• references

inn /tmp File Race Condition Vulnerability

Solution:
Upgrades available:


Debian Linux 2.2

• Debian 2.2 i386 inn2-dev_2.2.2.2000.01.31-4.1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/inn2- dev_2.2.2.2000.01.31-4.1_i386.deb


• Debian 2.2 i386 inn2_2.2.2.2000.01.31-4.1_i386.deb
  http://security.debian.org/dists/stable/updates/main/binary-i386/inn2_ 2.2.2.2000.01.31-4.1_i386.deb


• Debian 2.2 noarch task-news-server_2.2.2.2000.01.31-4.1_all.deb
  http://security.debian.org/dists/stable/updates/main/binary-all/task-n ews-server_2.2.2.2000.01.31-4.1_all.deb

Debian Linux 2.2 alpha

• Debian 2.2 alpha inn2-dev_2.2.2.2000.01.31-4.1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/inn2 -dev_2.2.2.2000.01.31-4.1_alpha.deb


• Debian 2.2 alpha inn2-inews_2.2.2.2000.01.31-4.1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/inn2 -inews_2.2.2.2000.01.31-4.1_alpha.deb


• Debian 2.2 alpha inn2_2.2.2.2000.01.31-4.1_alpha.deb
  http://security.debian.org/dists/stable/updates/main/binary-alpha/inn2 _2.2.2.2000.01.31-4.1_alpha.deb


• Debian 2.2 noarch task-news-server_2.2.2.2000.01.31-4.1_all.deb
  http://security.debian.org/dists/stable/updates/main/binary-all/task-n ews-server_2.2.2.2000.01.31-4.1_all.deb

Debian Linux 2.2 sparc

• Debian 2.2 noarch task-news-server_2.2.2.2000.01.31-4.1_all.deb
  http://security.debian.org/dists/stable/updates/main/binary-all/task-n ews-server_2.2.2.2000.01.31-4.1_all.deb


• Debian 2.2 sparc inn2-dev_2.2.2.2000.01.31-4.1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/inn2 -dev_2.2.2.2000.01.31-4.1_sparc.deb


• Debian 2.2 sparc inn2-inews_2.2.2.2000.01.31-4.1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/inn2 -inews_2.2.2.2000.01.31-4.1_sparc.deb


• Debian 2.2 sparc inn2_2.2.2.2000.01.31-4.1_sparc.deb
  http://security.debian.org/dists/stable/updates/main/binary-sparc/inn2 _2.2.2.2000.01.31-4.1_sparc.deb

Debian Linux 2.2 arm

• Debian 2.2 arm inn2-dev_2.2.2.2000.01.31-4.1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/inn2-d ev_2.2.2.2000.01.31-4.1_arm.deb


• Debian 2.2 arm inn2-inews_2.2.2.2000.01.31-4.1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/inn2-i news_2.2.2.2000.01.31-4.1_arm.deb


• Debian 2.2 arm inn2_2.2.2.2000.01.31-4.1_arm.deb
  http://security.debian.org/dists/stable/updates/main/binary-arm/inn2_2 .2.2.2000.01.31-4.1_arm.deb


• Debian 2.2 noarch task-news-server_2.2.2.2000.01.31-4.1_all.deb
  http://security.debian.org/dists/stable/updates/main/binary-all/task-n ews-server_2.2.2.2000.01.31-4.1_all.deb

Debian Linux 2.2 68k

• Debian 2.2 m68k inn2-dev_2.2.2.2000.01.31-4.1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/inn2- dev_2.2.2.2000.01.31-4.1_m68k.deb


• Debian 2.2 m68k inn2-inews_2.2.2.2000.01.31-4.1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/inn2- inews_2.2.2.2000.01.31-4.1_m68k.deb


• Debian 2.2 m68k inn2_2.2.2.2000.01.31-4.1_m68k.deb
  http://security.debian.org/dists/stable/updates/main/binary-m68k/inn2_ 2.2.2.2000.01.31-4.1_m68k.deb


• Debian 2.2 noarch task-news-server_2.2.2.2000.01.31-4.1_all.deb
  http://security.debian.org/dists/stable/updates/main/binary-all/task-n ews-server_2.2.2.2000.01.31-4.1_all.deb

Mandriva Linux Mandrake 6.0

• MandrakeSoft 6.0 i386 inews-2.2.3-1.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.0/RPMS/ inews-2.2.3-1.3mdk.i586.rpm


• MandrakeSoft 6.0 i386 inn-2.2.3-1.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.0/RPMS/ inn-2.2.3-1.3mdk.i586.rpm


• MandrakeSoft 6.0 i386 inn-devel-2.2.3-1.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.0/RPMS/ inn-devel-2.2.3-1.3mdk.i586.rpm

Mandriva Linux Mandrake 6.1

• MandrakeSoft 6.1 i386 inews-2.2.3-1.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.1/RPMS/ inews-2.2.3-1.3mdk.i586.rpm


• MandrakeSoft 6.1 i386 inn-2.2.3-1.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.1/RPMS/ inn-2.2.3-1.3mdk.i586.rpm


• MandrakeSoft 6.1 i386 inn-devel-2.2.3-1.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.1/RPMS/ inn-devel-2.2.3-1.3mdk.i586.rpm

Wirex Immunix OS 7.0 -Beta

• Wirex 7.0 i386 inews-2.2.3-3_StackGuard_3.i386.rpm
  http://www.immunix.org/ImmunixOS/7.0-beta/updates/RPMS/inews-2.2.3-3_S tackGuard_3.i386.rpm


• Wirex 7.0 i386 inn-2.2.3-3_StackGuard_3.i386.rpm
  http://www.immunix.org/ImmunixOS/7.0-beta/updates/RPMS/inn-2.2.3-3_Sta ckGuard_3.i386.rpm


• Wirex 7.0 i386 inn-devel-2.2.3-3_StackGuard_3.i386.rpm
  http://www.immunix.org/ImmunixOS/7.0-beta/updates/RPMS/inn-devel-2.2.3 -3_StackGuard_3.i386.rpm

Mandriva Linux Mandrake 7.0

• MandrakeSoft 7.0 i386 inews-2.2.3-1.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.0/RPMS/ inews-2.2.3-1.3mdk.i586.rpm


• MandrakeSoft 7.0 i386 inn-2.2.3-1.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.0/RPMS/ inn-2.2.3-1.3mdk.i586.rpm


• MandrakeSoft 7.0 i386 inn-devel-2.2.3-1.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.0/RPMS/ inn-devel-2.2.3-1.3mdk.i586.rpm

Mandriva Linux Mandrake 7.1

• MandrakeSoft 7.1 i386 inews-2.2.3-1.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.1/RPMS/ inews-2.2.3-1.3mdk.i586.rpm


• MandrakeSoft 7.1 i386 inn-2.2.3-1.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.1/RPMS/ inn-2.2.3-1.3mdk.i586.rpm


• MandrakeSoft 7.1 i386 inn-devel-2.2.3-1.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.1/RPMS/ inn-devel-2.2.3-1.3mdk.i586.rpm

Mandriva Linux Mandrake 7.2

• MandrakeSoft 7.2 i386 inews-2.2.3-1.1mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.2/RPMS/ inews-2.2.3-1.1mdk.i586.rpm


• MandrakeSoft 7.2 i386 inn-2.2.3-1.1mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.2/RPMS/ inn-2.2.3-1.1mdk.i586.rpm


• MandrakeSoft 7.2 i386 inn-devel-2.2.3-1.1mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.2/RPMS/ inn-devel-2.2.3-1.1mdk.i586.rpm