The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4588-1 advisory.

    It was discovered that FlightGear could write arbitrary files if received a special nasal script. A remote     attacker could exploit this with a crafted file to execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update fixes a security problem, where the route manager can potentially overwrite arbitrary files. CVE-2016-9956.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that the Flight Gear flight simulator performs insufficient sanitising of Nasal scripts which allows a malicious script to overwrite arbitrary files with the privileges of the user running Flight Gear.

ID	Name	Product	Family	Severity
141543	Ubuntu 16.04 LTS : FlightGear vulnerability (USN-4588-1)	Nessus	Ubuntu Local Security Checks	high
96352	Fedora 24 : FlightGear (2016-a1f774c3d7)	Nessus	Fedora Local Security Checks	high
96347	Fedora 25 : FlightGear (2016-01eba63bcc)	Nessus	Fedora Local Security Checks	high
95957	Debian DSA-3742-1 : flightgear - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2016-9956

high

Tenable Plugins

high

high

high

high