• info
• discussion
• exploit
• solution
• references

SuSE MkDir Error Handling rctab Race Condition Vulnerability

Solution:
This solution was supplied by Roman Drahtmueller <draht@suse.de> of SuSE Security:

Solution for the problem: remove the only occurrence of the string "-p " in the file /sbin/rctab. Change the line

mkdir -p ${tmpdir}
to read
mkdir ${tmpdir}