• info
• discussion
• exploit
• solution
• references

sdiff /tmp File Race Condition Vulnerability

Solution:
Upgrades available:


Redhat diffutils-2.7-21.i386.rpm

• RedHat 7.1 i386 diffutils-2.7-23.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/diffutils-2.7-23.i386.rpm

Redhat diffutils-2.7-11.i386.rpm

• RedHat 5.2 i386 diffutils-2.7-22.5x.i386.rpm
  ftp://updates.redhat.com/5.2/en/os/i386/diffutils-2.7-22.5x.i386.rpm

Redhat diffutils-2.7-17.i386.rpm

• RedHat 6.2 i386 diffutils-2.7-22.6x.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/diffutils-2.7-22.6x.i386.rpm

MandrakeSoft Corporate Server 1.0.1

• MandrakeSoft 1.0.1 i386 diffutils-2.7-25.4mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/1.0.1/RPM S/diffutils-2.7-25.4mdk.i586.rpm

Trustix Secure Linux 1.1

• Trustix 1.1 i386 diffutils-2.7-18tr.i586.rpm
  http://www.trustix.net/pub/Trustix/updates/1.1/RPMS/diffutils-2.7-18tr .i586.rpm

Trustix Secure Linux 1.2

• Trustix 1.2 i386 diffutils-2.7-18tr.i586.rpm
  http://www.trustix.net/pub/Trustix/updates/1.2/RPMS/diffutils-2.7-18tr .i586.rpm

Redhat Linux 5.2 alpha

• RedHat 5.2 alpha diffutils-2.7-22.5x.alpha.rpm
  ftp://updates.redhat.com/5.2/en/os/alpha/diffutils-2.7-22.5x.alpha.rpm

Redhat Linux 5.2 i386

• RedHat 5.2 i386 diffutils-2.7-22.5x.i386.rpm
  ftp://updates.redhat.com/5.2/en/os/i386/diffutils-2.7-22.5x.i386.rpm

Redhat Linux 5.2 sparc

• RedHat 5.2 sparc diffutils-2.7-22.5x.sparc.rpm
  ftp://updates.redhat.com/5.2/en/os/sparc/diffutils-2.7-22.5x.sparc.rpm

Mandriva Linux Mandrake 6.0

• MandrakeSoft 6.0 i386 diffutils-2.7-25.4mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.0/RPMS/ diffutils-2.7-25.4mdk.i586.rpm

Mandriva Linux Mandrake 6.1

• MandrakeSoft 6.1 i386 diffutils-2.7-25.4mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/6.1/RPMS/ diffutils-2.7-25.4mdk.i586.rpm

Redhat Linux 6.2 alpha

• RedHat 6.2 alpha diffutils-2.7-22.6x.alpha.rpm
  ftp://updates.redhat.com/6.2/en/os/alpha/diffutils-2.7-22.6x.alpha.rpm

Redhat Linux 6.2 i386

• RedHat 6.2 i386 diffutils-2.7-22.6x.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/diffutils-2.7-22.6x.i386.rpm

Redhat Linux 6.2 sparc

• RedHat 6.2 sparc diffutils-2.7-22.6x.sparc.rpm
  ftp://updates.redhat.com/6.2/en/os/sparc/diffutils-2.7-22.6x.sparc.rpm

Wirex Immunix OS 7.0 -Beta

• Wirex 7.0 i386 diffutils-2.7-21_StackGuard_2.i386.rpm
  http://www.immunix.org/ImmunixOS/7.0-beta/updates/RPMS/diffutils-2.7-2 1_StackGuard_2.i386.rpm

Mandriva Linux Mandrake 7.0

• MandrakeSoft 7.0 i386 diffutils-2.7-25.4mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.0/RPMS/ diffutils-2.7-25.4mdk.i586.rpm

Redhat Linux 7.1 alpha

• RedHat 7.1 alpha diffutils-2.7-23.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/diffutils-2.7-23.alpha.rpm

Mandriva Linux Mandrake 7.1

• MandrakeSoft 7.1 i386 diffutils-2.7-25.3mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.1/RPMS/ diffutils-2.7-25.3mdk.i586.rpm

Redhat Linux 7.1 ia64

• RedHat 7.1 i386 diffutils-2.7-23.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/diffutils-2.7-23.ia64.rpm

Redhat Linux 7.1 i386

• RedHat 7.1 i386 diffutils-2.7-23.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/diffutils-2.7-23.i386.rpm

Mandriva Linux Mandrake 7.2

• MandrakeSoft 7.2 i386 diffutils-2.7-25.4mdk.i586.rpm
  http://sunsite.ualberta.ca/pub/Mirror/Linux/mandrake/updates/7.2/RPMS/ diffutils-2.7-25.4mdk.i586.rpm