• info
• discussion
• exploit
• solution
• references

teTeX Filters Temporary File Race Condition Vulnerability

Solution:
Vendor packages that rectify this issue are available:


teTeX teTeX 1.0.7

• Immunix 6.2 i386 tetex-1.0.7-7_StackGuard_1.i386.rpm
  http://download.immunix.org/ImmunixOS/6.2/updates/RPMS/tetex-1.0.7-7_S tackGuard_1.i386.rpm


• Immunix 6.2 i386 tetex-afm-1.0.7-7_StackGuard_1.i386.rpm
  http://download.immunix.org/ImmunixOS/6.2/updates/RPMS/tetex-afm-1.0.7 -7_StackGuard_1.i386.rpm


• Immunix 6.2 i386 tetex-doc-1.0.7-7_StackGuard_1.i386.rpm
  http://download.immunix.org/ImmunixOS/6.2/updates/RPMS/tetex-doc-1.0.7 -7_StackGuard_1.i386.rpm


• Immunix 6.2 i386 tetex-dvilj-1.0.7-7_StackGuard_1.i386.rpm
  http://download.immunix.org/ImmunixOS/6.2/updates/RPMS/tetex-dvilj-1.0 .7-7_StackGuard_1.i386.rpm


• Immunix 6.2 i386 tetex-dvips-1.0.7-7_StackGuard_1.i386.rpm
  http://download.immunix.org/ImmunixOS/6.2/updates/RPMS/tetex-dvips-1.0 .7-7_StackGuard_1.i386.rpm


• Immunix 6.2 i386 tetex-fonts-1.0.7-7_StackGuard_1.i386.rpm
  http://download.immunix.org/ImmunixOS/6.2/updates/RPMS/tetex-fonts-1.0 .7-7_StackGuard_1.i386.rpm


• Immunix 6.2 i386 tetex-latex-1.0.7-7_StackGuard_1.i386.rpm
  http://download.immunix.org/ImmunixOS/6.2/updates/RPMS/tetex-latex-1.0 .7-7_StackGuard_1.i386.rpm


• Immunix 6.2 i386 tetex-xdvi-1.0.7-7_StackGuard_1.i386.rpm
  http://download.immunix.org/ImmunixOS/6.2/updates/RPMS/tetex-xdvi-1.0. 7-7_StackGuard_1.i386.rpm


• Immunix 7.0 i386 tetex-1.0.7-7_imnx_1.i386.rpm
  http://download.immunix.org/ImmunixOS/7.0/updates/RPMS/tetex-1.0.7-7_i mnx_1.i386.rpm


• Immunix 7.0 i386 tetex-afm-1.0.7-7_imnx_1.i386.rpm
  http://download.immunix.org/ImmunixOS/7.0/updates/RPMS/tetex-afm-1.0.7 -7_imnx_1.i386.rpm


• Immunix 7.0 i386 tetex-doc-1.0.7-7_imnx_1.i386.rpm
  http://download.immunix.org/ImmunixOS/7.0/updates/RPMS/tetex-doc-1.0.7 -7_imnx_1.i386.rpm


• Immunix 7.0 i386 tetex-dvilj-1.0.7-7_imnx_1.i386.rpm
  http://download.immunix.org/ImmunixOS/7.0/updates/RPMS/tetex-dvilj-1.0 .7-7_imnx_1.i386.rpm


• Immunix 7.0 i386 tetex-dvips-1.0.7-7_imnx_1.i386.rpm
  http://download.immunix.org/ImmunixOS/7.0/updates/RPMS/tetex-dvips-1.0 .7-7_imnx_1.i386.rpm


• Immunix 7.0 i386 tetex-fonts-1.0.7-7_imnx_1.i386.rpm
  http://download.immunix.org/ImmunixOS/7.0/updates/RPMS/tetex-fonts-1.0 .7-7_imnx_1.i386.rpm


• Immunix 7.0 i386 tetex-latex-1.0.7-7_imnx_1.i386.rpm
  http://download.immunix.org/ImmunixOS/7.0/updates/RPMS/tetex-latex-1.0 .7-7_imnx_1.i386.rpm


• Immunix 7.0 i386 tetex-xdvi-1.0.7-7_imnx_1.i386.rpm
  http://download.immunix.org/ImmunixOS/7.0/updates/RPMS/tetex-xdvi-1.0. 7-7_imnx_1.i386.rpm


• MandrakeSoft 1.0.1 i586 tetex-afm-1.0.7-6.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 1.0.1 i586 tetex-doc-1.0.7-6.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 1.0.1 i586 tetex-dvilj-1.0.7-6.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 1.0.1 i586 tetex-dvips-1.0.7-6.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 1.0.1 i586 tetex-latex-1.0.7-6.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 1.0.1 i586 tetex-xdvi-1.0.7-6.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.1 i586 tetex-1.0.7-6.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.1 i586 tetex-afm-1.0.7-6.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.1 i586 tetex-doc-1.0.7-6.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.1 i586 tetex-dvilj-1.0.7-6.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.1 i586 tetex-dvips-1.0.7-6.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.1 i586 tetex-latex-1.0.7-6.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.1 i586 tetex-xdvi-1.0.7-6.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.2 i586 tetex-1.0.7-11.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.2 i586 tetex-afm-1.0.7-11.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.2 i586 tetex-doc-1.0.7-11.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.2 i586 tetex-dvilj-1.0.7-11.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.2 i586 tetex-dvips-1.0.7-11.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.2 i586 tetex-latex-1.0.7-11.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 7.2 i586 tetex-xdvi-1.0.7-11.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 i586 tetex-1.0.7-21.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 i586 tetex-afm-1.0.7-21.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 i586 tetex-doc-1.0.7-21.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 i586 tetex-dvilj-1.0.7-21.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 i586 tetex-dvipdfm-1.0.7-21.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 i586 tetex-dvips-1.0.7-21.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 i586 tetex-latex-1.0.7-21.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 i586 tetex-xdvi-1.0.7-21.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 ppc tetex-1.0.7-21.1mdk.ppc.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 ppc tetex-afm-1.0.7-21.1mdk.ppc.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 ppc tetex-doc-1.0.7-21.1mdk.ppc.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 ppc tetex-dvilj-1.0.7-21.1mdk.ppc.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 ppc tetex-dvipdfm-1.0.7-21.1mdk.ppc.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 ppc tetex-dvips-1.0.7-21.1mdk.ppc.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 ppc tetex-latex-1.0.7-21.1mdk.ppc.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.0 ppc tetex-xdvi-1.0.7-21.1mdk.ppc.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.1 i586 tetex-1.0.7-31.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.1 i586 tetex-afm-1.0.7-31.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.1 i586 tetex-doc-1.0.7-31.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.1 i586 tetex-dvilj-1.0.7-31.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.1 i586 tetex-dvipdfm-1.0.7-31.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.1 i586 tetex-dvips-1.0.7-31.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.1 i586 tetex-latex-1.0.7-31.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3


• MandrakeSoft 8.1 i586 tetex-xdvi-1.0.7-31.1mdk.i586.rpm
  http://www.linux-mandrake.com/en/ftp.php3