https://bugzilla.novell.com/show_bug.cgi?id=459031 Petr Uzel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=459031 User meissner@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=459031#c2 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- CC|opensuse-contrib@opensuse.org | Status|NEEDINFO |ASSIGNED Info Provider|meissner@novell.com | --- Comment #2 from Marcus Meissner 2008-12-15 09:12:37 MST --- removing the list from cc to avoid spam. you can predict the PID of the script. Ecven the range is easy to do , just create 32768 symlinks. Also some of the scripts (IIRC) generate multiple files with from the same PID, you can just wait for the first one to be created and then create the next one. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=459031 User meissner@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=459031#c3 --- Comment #3 from Marcus Meissner 2009-01-07 13:20:41 MST --- from oss-sec: Martin Väth also discovered an untrusted search path vulnerability in the pdfjam scripts: They prepend . to PATH, allowing attackers to execute code by preparing executables (e.g. sed) in the directory pdfnup was run from or in /var/tmp (e.g. pdflatex, cp, rm). Martin also prepared a patch, see: https://bugs.gentoo.org/show_bug.cgi?id=252734 Please assign another CVE for this issue. Robert -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=459031 User puzel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=459031#c5 --- Comment #5 from Petr Uzel 2009-01-08 03:52:54 MST --- Thanks for the link - I've just submitted fixed package to Contrib. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=459031 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=459031#c9 --- Comment #9 from Ludwig Nussel 2009-03-09 03:53:59 MST --- ====================================================== Name: CVE-2008-5743 pdfjam creates the (1) pdf90, (2) pdfjoin, and (3) pdfnup files with a predictable name, which allows local users to overwrite arbitrary files via a symlink attack. Reference: MISC: https://bugzilla.novell.com/show_bug.cgi?id=459031 Reference: BID: http://www.securityfocus.com/bid/32931 Reference: MLIST: http://www.openwall.com/lists/oss-security/2008/12/19/3 Reference: SECUNIA: http://secunia.com/advisories/33278 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.