header-logo
Suggest Exploit
vendor:
BRU
by:
SecurityFocus
7.2
CVSS
HIGH
Symbolic Link Attack
N/A
CWE
Product Name: BRU
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: No
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Linux
2002

BRU Symbolic Link Attack

BRU is a backup and restore utility distributed by The Tolis Group. This vulnerability affects the utility on the Linux platform. xbru does not properly check for the existence of temporary files prior to execution. Because of this, it is possible for a local user to create symbolic links to other files, which will be overwritten by the BRU user. As BRU is typically run by the root user, this could result in the overwriting of root-owned files.

Mitigation:

Ensure that the BRU utility is not run by the root user.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/5708/info

BRU is a backup and restore utility distributed by The Tolis Group. This problem affects the utility on the Linux platform.

xbru does not properly check for the existence of temporary files prior to execution. Because of this, it is possible for a local user to create symbolic links to other files, which will be overwritten by the BRU user. As BRU is typically run by the root user, this could result in the overwriting of root-owned files. 

ln -s /tmp/clobber /tmp/xbru_dscheck.dd

ln -s /etc/log.d/scripts/logfiles/xferlog/'`cd etc;chmod 666 passwd #`' /tmp/xbru_dscheck.dd

Navigation

Suggest Exploit

Services By CQR