Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID], (6) xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9) xfig-batch[PID], (10) xfig-exp[PID], or (11) xfig-spell.[PID] temporary files, where [PID] is a process ID.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - Xfig, Transfig: Stack-based buffer overflow by loading malformed .FIG files (CVE-2009-4228)

  - Xfig: Stack-based buffer overflow by processing certain FIG images (CVE-2010-4262)

  - Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1)     xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID],     (6) xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9) xfig-batch[PID], (10) xfig-exp[PID], or     (11) xfig-spell.[PID] temporary files, where [PID] is a process ID. (CVE-2009-1962)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - Xfig, Transfig: Stack-based buffer overflow by loading malformed .FIG files (CVE-2009-4228)

  - Xfig: Stack-based buffer overflow by processing certain FIG images (CVE-2010-4262)

  - Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1)     xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID],     (6) xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9) xfig-batch[PID], (10) xfig-exp[PID], or     (11) xfig-spell.[PID] temporary files, where [PID] is a process ID. (CVE-2009-1962)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - Xfig, Transfig: Stack-based buffer overflow by loading malformed .FIG files (CVE-2009-4228)

  - Xfig: Stack-based buffer overflow by processing certain FIG images (CVE-2010-4262)

  - Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1)     xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID],     (6) xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9) xfig-batch[PID], (10) xfig-exp[PID], or     (11) xfig-spell.[PID] temporary files, where [PID] is a process ID. (CVE-2009-1962)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

A vulnerability was discovered and corrected in xfig :

Xfig in Debian GNU/Linux, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID], (6) xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9) xfig-batch[PID], (10) xfig-exp[PID], or (11) xfig-spell.[PID] temporary files, where [PID] is a process ID (CVE-2009-1962).

This update provides a solution to this vulnerability.

Update :

Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers.

ID	Name	Product	Family	Severity
199368	RHEL 6 : xfig (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199364	RHEL 5 : xfig (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199345	RHEL 4 : xfig (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
43608	Mandriva Linux Security Advisory : xfig (MDVSA-2009:244-1)	Nessus	Mandriva Local Security Checks	medium

Detections

Analytics

CVE-2009-1962

critical

Tenable Plugins

high

high

high

medium