• info
• discussion
• exploit
• solution
• references

xSANE Insecure Temporary File Creation Vulnerability

Solution:
This vulnerability has been fixed in version 0.82 of xSANE. Additional upgrades are also available.


Oliver Rauch xSANE 0.81

• FreeBSD 4 stable i386 xsane-0.82.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-4-stable/graphic s/xsane-0.82.tgz


• FreeBSD 5 current i386 xsane-0.82.tgz
  ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/i386/packages-5-current/graphi cs/xsane-0.82.tgz


• Red Hat sane-1.0.3-10.1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/sane-1.0.3-10.1.alpha.rpm


• Red Hat sane-1.0.3-10.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/sane-1.0.3-10.1.i386.rpm


• Red Hat sane-1.0.3-10.1.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/sane-1.0.3-10.1.ia64.rpm


• Red Hat sane-1.0.3-2.1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/sane-1.0.3-2.1.alpha.rpm


• Red Hat sane-1.0.3-2.1.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/sane-1.0.3-2.1.i386.rpm


• Red Hat sane-backends-1.0.5-4.1.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/sane-backends-1.0.5-4.1.i386.r pm


• Red Hat sane-backends-1.0.5-4.1.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/sane-backends-1.0.5-4.1.ia64.r pm


• Red Hat sane-backends-devel-1.0.5-4.1.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/sane-backends-devel-1.0.5-4.1. i386.rpm


• Red Hat sane-backends-devel-1.0.5-4.1.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/sane-backends-devel-1.0.5-4.1. ia64.rpm


• Red Hat sane-devel-1.0.3-10.1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/sane-devel-1.0.3-10.1.alpha.r pm


• Red Hat sane-devel-1.0.3-10.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/sane-devel-1.0.3-10.1.i386.rpm


• Red Hat sane-devel-1.0.3-10.1.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/sane-devel-1.0.3-10.1.ia64.rpm


• Red Hat sane-devel-1.0.3-2.1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/sane-devel-1.0.3-2.1.alpha.rp m


• Red Hat sane-devel-1.0.3-2.1.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/sane-devel-1.0.3-2.1.i386.rpm


• Red Hat xsane-0.82-2.1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/xsane-0.82-2.1.alpha.rpm


• Red Hat xsane-0.82-2.1.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/xsane-0.82-2.1.i386.rpm


• Red Hat xsane-0.82-3.1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/xsane-0.82-3.1.alpha.rpm


• Red Hat xsane-0.82-3.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/xsane-0.82-3.1.i386.rpm


• Red Hat xsane-0.82-3.1.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/xsane-0.82-3.1.i386.rpm


• Red Hat xsane-0.82-3.1.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/xsane-0.82-3.1.ia64.rpm


• Red Hat xsane-0.82-3.1.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/xsane-0.82-3.1.ia64.rpm


• Red Hat xsane-gimp-0.82-2.1.alpha.rpm
  ftp://updates.redhat.com/7.0/en/os/alpha/xsane-gimp-0.82-2.1.alpha.rpm


• Red Hat xsane-gimp-0.82-2.1.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/xsane-gimp-0.82-2.1.i386.rpm


• Red Hat xsane-gimp-0.82-3.1.alpha.rpm
  ftp://updates.redhat.com/7.1/en/os/alpha/xsane-gimp-0.82-3.1.alpha.rpm


• Red Hat xsane-gimp-0.82-3.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/xsane-gimp-0.82-3.1.i386.rpm


• Red Hat xsane-gimp-0.82-3.1.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/xsane-gimp-0.82-3.1.i386.rpm


• Red Hat xsane-gimp-0.82-3.1.ia64.rpm
  ftp://updates.redhat.com/7.1/en/os/ia64/xsane-gimp-0.82-3.1.ia64.rpm


• Red Hat xsane-gimp-0.82-3.1.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/xsane-gimp-0.82-3.1.ia64.rpm