iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through 11.1 and SUSE Linux Enterprise (SLE) 10 SP2 and 11, and other operating systems, allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file that has a predictable name.

Updated open-iscsi package fixes security vulnerability :

Colin Watson discovered that iscsi_discovery in Open-iSCSI did not safely create temporary files. A local attacker could exploit this to overwrite arbitrary files with root privileges (CVE-2009-1297).

Colin Watson discovered that iscsi_discovery in Open-iSCSI did not safely create temporary files. A local attacker could exploit this to to overwrite arbitrary files with root privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The iscsi_discovery tool created predictable temporary files which potentially allowed attackers to overwrite system files (CVE-2009-1297 ).

The iscsi_discovery tool created predictable temporary files which potentially allowed attackers to overwrite system files.
(CVE-2009-1297)

Also several non-security bugs have been fixed :

  - don't fail init script if discovery fails

  - print correct ipconfig mask for dhcp

  - synchronize startup settings

  - fix daemon segfault with CHAP

The iscsi_discovery tool created predictable temporary files which potentially allowed attackers to overwrite system files.
(CVE-2009-1297)

Also some non-security bugs have been fixed :

  - synchronize startup settings

  - fix daemon segfault with CHAP

ID	Name	Product	Family	Severity
66121	Mandriva Linux Security Advisory : open-iscsi (MDVSA-2013:109)	Nessus	Mandriva Local Security Checks	medium
56582	Ubuntu 8.04 LTS : open-iscsi vulnerability (USN-1235-1)	Nessus	Ubuntu Local Security Checks	medium
42026	openSUSE 10 Security Update : open-iscsi (open-iscsi-6454)	Nessus	SuSE Local Security Checks	medium
41565	SuSE 10 Security Update : open-iscsi (ZYPP Patch Number 6455)	Nessus	SuSE Local Security Checks	medium
41442	SuSE 11 Security Update : open-iscsi (SAT Patch Number 1240)	Nessus	SuSE Local Security Checks	medium
41012	openSUSE Security Update : open-iscsi (open-iscsi-1238)	Nessus	SuSE Local Security Checks	medium
41010	openSUSE Security Update : open-iscsi (open-iscsi-1238)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2009-1297

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium