Mozilla, Thunderbird, and Firefox files are world-readable
| mozilla-world-readable (17832) |  Medium Risk |
Description:
Mozilla is an open-source Web browser developed by the Mozilla project. Mozilla versions 1.7 through 1.7.3, Firefox versions 0.9 through 1.0PR, and Thunderbird versions 0.6 through 0.8 running on Linux platforms could allow a local attacker to obtain sensitive information. The browser saves a file to a temporary directory with world-readable permissions, when the "Open with" option is clicked to open the file. A local attacker could exploit this vulnerability to view this file and obtain sensitive information.
Platforms Affected:
- Canonical, Ubuntu 4.10
- Mozilla, Firefox 0.9
- Mozilla, Mozilla 1.7 Beta
- Mozilla, Mozilla 1.7
- Mozilla, Mozilla 1.7 rc3
- Mozilla, Mozilla 1.7 Alpha
- Mozilla, Mozilla 1.7 rc1
- Mozilla, Mozilla 1.7 rc2
- Mozilla, Mozilla 1.7.1
- Mozilla, Mozilla 1.7.2
- Mozilla, Mozilla 1.7.3
- Mozilla, Thunderbird 0.6
- Mozilla, Thunderbird 0.7
- Mozilla, Thunderbird 0.7.1
- Mozilla, Thunderbird 0.7.2
- Mozilla, Thunderbird 0.7.3
- Mozilla, Thunderbird 0.8
- RedHat, Enterprise Linux 2.1 WS
- RedHat, Enterprise Linux 2.1 ES
- RedHat, Enterprise Linux 2.1 AS
- RedHat, Enterprise Linux 3 Desktop
- RedHat, Enterprise Linux 3 AS
- RedHat, Enterprise Linux 3 ES
- RedHat, Enterprise Linux 3 WS
- RedHat, Enterprise Linux 4 ES
- RedHat, Enterprise Linux 4 Desktop
- RedHat, Enterprise Linux 4 WS
- RedHat, Enterprise Linux 4 AS
- RedHat, Linux Advanced Workstation 2.1 Itanium
- SuSE, SuSE Linux 10.0
- SuSE, SuSE Linux 9.1
- SuSE, SuSE Linux 9.2
- SuSE, SuSE Linux 9.3
Remedy:
Upgrade to the latest CVS version, available from the Bugzilla Bug #251297. See References.
For Red Hat Linux (Mozilla):
Refer to RHSA-2005:384-11 for patch, upgrade, or suggested workaround information. See References.
For Ubuntu Linux:
Refer to USN-149-3 for patch, upgrade, or suggested workaround information. See References.
For SUSE Linux:
Refer to SUSE Security Announcement SUSE-SA:2006:022 for patch, upgrade, or suggested workaround information. See References.
For other distributions:
Contact your vendor for upgrade or patch information.
Consequences:
Gain Access
References:
- broadcast Advisories 008, Mozilla Thunderbird 0.8 / Firefox 0.9.3 temporary files (local) at http://broadcast.ptraced.net/advisories/008-firefox.thunderbird.txt.
- Bugzilla Bug #251297, files in /tmp world readable (email attachments, helper app docs) at https://bugzilla.mozilla.org/show_bug.cgi?id=251297.
- Full-Disclosure Mailing List, Sun Oct 24 2004 - 16:09:05 CDT, Mozilla Thunderbird 0.8 / Firefox 0.9.3 temporary files (local) at http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0974.html.
- MFSA 2005-02, Opened attachments are temporarily saved world-readable at http://www.mozilla.org/security/announce/mfsa2005-02.html.
- BID-11522: Mozilla Temporary File Insecure Permissions Information Disclosure Vulnerability
- CVE-2005-0142: Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such as PDF.
- RHSA-2005-335: mozilla security update
- RHSA-2005-384: Mozilla security update
- SUSE-SA:2006:022: MozillaThunderbird various problems
- USN-149-3: Ubuntu 4.10 update for Firefox vulnerabilities
Reported:
Oct 24, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net