• info
• discussion
• exploit
• solution
• references

GNU Fileutils Directory Removal Race Condition Vulnerability

Solution:
Please see the references for more information and fixes.


GNU fileutils 4.0

• Immunix fileutils-4.0x-3_imnx_1.i386.rpm
  http://download.immunix.org/ImmunixOS/7+/Updates/RPMS/fileutils-4.0x-3 _imnx_1.i386.rpm


• RedHat fileutils-4.0-21.1.i386.rpm
  ftp://updates.redhat.com/6.2/en/os/i386/fileutils-4.0-21.1.i386.rpm


• RedHat fileutils-4.0x-3.1.i386.rpm
  ftp://updates.redhat.com/7.0/en/os/i386/fileutils-4.0x-3.1.i386.rpm


• SuSE fileutil-4.0-175.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.4/a1/fileutil-4.0-175.i386.r pm


• SuSE fileutil-4.0-177.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.0/a1/fileutil-4.0-177.i386.r pm


• SuSE fileutil-4.0-195.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/6.4/a1/fileutil-4.0-195.ppc.rpm


• SuSE fileutil-4.0-196.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.0/a1/fileutil-4.0-196.ppc.rpm


• SuSE fileutil-4.0-4.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.0/a1/fileutil-4.0-4.sparc.r pm


• SuSE fileutil-4.0-80.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.4/a1/fileutil-4.0-80.alpha.rp m


• SuSE fileutil-4.0-81.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.0/a1/fileutil-4.0-81.alpha.rp m


• SuSE fileutils-4.0.35-26.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.1/a1/fileutils-4.0.35-26.sp arc.rpm


• SuSE fileutils-4.0.35-31.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.1/a1/fileutils-4.0.35-31.alph a.rpm


• SuSE fileutils-4.0.35-32.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.1/a1/fileutils-4.0.35-32.ppc. rpm


• SuSE fileutils-4.0.35-66.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/a1/fileutils-4.0.35-66.i38 6.rpm


• SuSE fileutils-4.0.35-67.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.2/a1/fileutils-4.0.35-67.i38 6.rpm

GNU fileutils 4.0.36

• RedHat fileutils-4.0.36-4.1.i386.rpm
  ftp://updates.redhat.com/7.1/en/os/i386/fileutils-4.0.36-4.1.i386.rpm

GNU fileutils 4.1

• Caldera fileutils-4.1-4.i386.rpm
  OpenLinux 3.1.1 Server
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Server/current/RPMS/ fileutils-4.1-4.i386.rpm


• Caldera fileutils-4.1-4.i386.rpm
  OpenLinux 3.1.1 Workstation
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Workstation/current/ RPMS/fileutils-4.1-4.i386.rpm


• Caldera fileutils-4.1-4.i386.rpm
  OpenLinux 3.1 Server
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS/fi leutils-4.1-4.i386.rpm


• Caldera fileutils-4.1-4.i386.rpm
  OpenLinux 3.1 Workstation
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RP MS/fileutils-4.1-4.i386.rpm


• Caldera fileutils-4.1-5.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Server/current/RPMS/ fileutils-4.1-5.i386.rpm


• Caldera fileutils-4.1-5.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1.1/Workstation/current/ RPMS/fileutils-4.1-5.i386.rpm


• Caldera fileutils-4.1-5.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Server/current/RPMS/fi leutils-4.1-5.i386.rpm


• Caldera fileutils-4.1-5.i386.rpm
  ftp://ftp.caldera.com/pub/updates/OpenLinux/3.1/Workstation/current/RP MS/fileutils-4.1-5.i386.rpm


• MandrakeSoft fileutils-4.1-4.1mdk.i586.rpm
  ftp://ftp.rpmfind.net/linux/mandrake/stable/updates/8.1/RPMS/fileutils -4.1-4.1mdk.i586.rpm


• MandrakeSoft fileutils-4.1-4.1mdk.ia64.rpm
  ftp://ftp.rpmfind.net/linux/mandrake/stable/updates/ia64/8.1/RPMS/file utils-4.1-4.1mdk.ia64.rpm


• MandrakeSoft fileutils-4.1.5-4.1mdk.i586.rpm
  ftp://ftp.rpmfind.net/linux/mandrake/stable/updates/8.2/RPMS/fileutils -4.1.5-4.1mdk.i586.rpm


• MandrakeSoft fileutils-4.1.5-4.1mdk.ppc.rpm
  ftp://ftp.rpmfind.net/linux/mandrake/stable/updates/ppc/8.2/RPMS/fileu tils-4.1.5-4.1mdk.ppc.rpm


• RedHat fileutils-4.1-10.1.i386.rpm
  ftp://updates.redhat.com/7.2/en/os/i386/fileutils-4.1-10.1.i386.rpm


• RedHat fileutils-4.1-10.1.i386.rpm
  ftp://updates.redhat.com/7.3/en/os/i386/fileutils-4.1-10.1.i386.rpm


• RedHat fileutils-4.1-10.1.ia64.rpm
  ftp://updates.redhat.com/7.2/en/os/ia64/fileutils-4.1-10.1.ia64.rpm


• SuSE fileutils-4.1-111.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.3/a1/fileutils-4.1-111.ppc.rp m


• SuSE fileutils-4.1-154.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.3/a1/fileutils-4.1-154.i386. rpm


• SuSE fileutils-4.1-68.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.3/a1/fileutils-4.1-68.sparc .rpm


• Trustix fileutils-4.1-2tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.1/RPMS/fileutils-4.1-2tr.i 586.rpm


• Trustix fileutils-4.1-2tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.2/RPMS/fileutils-4.1-2tr.i 586.rpm


• Trustix fileutils-4.1-2tr.i586.rpm
  ftp://ftp.trustix.net/pub/Trustix/updates/1.5/RPMS/fileutils-4.1-2tr.i 586.rpm

GNU fileutils 4.1.6

• Sun fileutils-4.1-10.1.i386.rpm
  ftp://ftp.cobalt.sun.com/pub/products/sunlinux/5.0/en/updates/i386/RPM S/fileutils-4.1-10.1.i386.rpm