aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to hijack the IPC by pre-creating the temporary directory.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - arts,kdelibs3: Use of mktemp(3) allows attacker to hijack the IPC (CVE-2015-7543)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - arts,kdelibs3: Use of mktemp(3) allows attacker to hijack the IPC (CVE-2015-7543)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

This update for kdelibs3 fixes the following issues :

CVE-2015-7543: Insecure creation of temporary directories allowed local users to hijack the IPC by pre-creating the temporary directory (bsc#958347).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2015-7543 in arts (the legacy aRts sound server):
A temporary directory was being created insecurely using mktemp and mkdir, allowing an attacker to hijack the temporary directory and thus the inter- process communication (IPC). This update fixes the temporary directory creation to use the safe mkdtemp function instead.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2015-7543 in kdelibs3 (the KDE 3 compatibility version of kdelibs): A temporary directory was being created insecurely using mktemp and mkdir, allowing an attacker to hijack the temporary directory and thus the inter-process communication (IPC).
This update fixes the temporary directory creation to use the safe mkdtemp function instead.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It has been reported that kdelibs uses the insecure mktemp() function to create the temporary directory it uses to host user-specific sockets. It is thus possible for another user to hijack this temporary directory and gain socket accesses it should not have.

In Debian 6 'Squeeze', this issue has been addressed in kdelibs 3.5.10.dfsg.1-5+deb6u1 with the use of the safer mkdtemp() function. We recommend that you upgrade your kdelibs packages.

Other Debian releases have newer versions of the libraries (kdelibs4) that are not affected by this problem.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It has been reported that arts uses the insecure mktemp() function to create the temporary directory it uses to host user-specific sockets.
It is thus possible for another user to hijack this temporary directory and gain IPC access it should not have.

In Debian 6 'Squeeze', this issue has been addressed in arts 1.5.9-3+deb6u1 with the use of the safer mkdtemp() function. We recommend that you upgrade your arts packages.

Other Debian releases do not have the arts package.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
199087	RHEL 5 : arts (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199044	RHEL 6 : arts (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
118490	SUSE SLES11 Security Update : kdelibs3 (SUSE-SU-2018:3487-1)	Nessus	SuSE Local Security Checks	high
89322	Fedora 22 : arts-1.5.10-30.fc22 (2015-8dd01b09a9)	Nessus	Fedora Local Security Checks	high
89274	Fedora 23 : kdelibs3-3.5.10-71.fc23 (2015-6e50918d8e)	Nessus	Fedora Local Security Checks	high
89269	Fedora 23 : arts-1.5.10-30.fc23 (2015-6d473c95ee)	Nessus	Fedora Local Security Checks	high
89195	Fedora 22 : kdelibs3-3.5.10-71.fc22 (2015-2f4b92ed2e)	Nessus	Fedora Local Security Checks	high
87316	Debian DLA-367-1 : kdelibs security update	Nessus	Debian Local Security Checks	high
87315	Debian DLA-366-1 : arts security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2015-7543

high

Tenable Plugins

high

high

high

high

high

high

high

high

high