• info
• discussion
• exploit
• solution
• references

XMCD Temp Directory Symbolic Link Vulnerability

Solution:
Upgrade available:


Ti Kan Xmcd 2.6 .0

• S.u.S.E. 7.0 i386 xmcd-3.0.2-2.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.0/snd2/xmcd-3.0.2-2.i386.rpm


• S.u.S.E. 7.2 i386 xmcd-2.6-195.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.2/snd2/xmcd-2.6-195.i386.rpm


• Ti Kan Xmcd 3.0 patch level 2
  http://www.ibiblio.org/tkan/download/xmcd/src/xmcd-3.0.2.tar.gz

Ti Kan Xmcd 3.0 .0

• Ti Kan Xmcd 3.0 patch level 2
  http://www.ibiblio.org/tkan/download/xmcd/src/xmcd-3.0.2.tar.gz

Ti Kan Xmcd 3.0.1

• S.u.S.E. 6.3 alpha xmcd-3.0.2-4.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.3/snd2/xmcd-3.0.2-4.alpha.rpm


• S.u.S.E. 6.3 i386 xmcd-3.0.2-2.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.3/snd2/xmcd-3.0.2-2.i386.rpm


• S.u.S.E. 6.4 alpha xmcd-3.0.2-4.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.4/snd2/xmcd-3.0.2-4.alpha.rpm


• S.u.S.E. 6.4 i386 xmcd-3.0.2-2.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.4/snd2/xmcd-3.0.2-2.i386.rpm


• S.u.S.E. 6.4 ppc xmcd-3.0.2-3.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/6.4/snd2/xmcd-3.0.2-3.ppc.rpm


• S.u.S.E. 7.0 alpha xmcd-3.0.2-3.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.0/snd2/xmcd-3.0.2-3.alpha.rpm


• S.u.S.E. 7.0 i386 xmcd-3.0.2-2.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.0/snd2/xmcd-3.0.2-2.i386.rpm


• S.u.S.E. 7.0 ppc xmcd-3.0.2-3.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.0/snd2/xmcd-3.0.2-3.ppc.rpm


• S.u.S.E. 7.0 sparc xmcd-3.0.2-0.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.0/snd2/xmcd-3.0.2-0.sparc.r pm


• S.u.S.E. 7.1 alpha xmcd-3.0.2-2.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.1/snd2/xmcd-3.0.2-2.alpha.rpm


• S.u.S.E. 7.1 i386 xmcd-3.0.2-2.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/snd2/xmcd-3.0.2-2.i386.rpm


• S.u.S.E. 7.1 ppc xmcd-3.0.2-3.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.1/snd2/xmcd-3.0.2-3.ppc.rpm


• S.u.S.E. 7.1 sparc xmcd-3.0.2-0.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.1/snd2/xmcd-3.0.2-0.sparc.r pm


• Ti Kan Xmcd 3.0 patch level 2
  http://www.ibiblio.org/tkan/download/xmcd/src/xmcd-3.0.2.tar.gz