CVE Vulnerabilities

CVE-2011-0460

Improper Link Resolution Before File Access ('Link Following')

Published: Apr 16, 2014 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.3 MEDIUM
AV:L/AC:M/Au:N/C:N/I:C/A:C
RedHat/V2
6.3 MODERATE
AV:L/AC:M/Au:N/C:N/I:C/A:C
RedHat/V3
Ubuntu

The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map.

Weakness

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Affected Software

Name Vendor Start Version End Version
Kbd Kbd-project 0.99 0.99
Kbd Kbd-project 1.01 1.01
Kbd Kbd-project 1.03 1.03
Kbd Kbd-project 1.04 1.04
Kbd Kbd-project 1.05 1.05
Kbd Kbd-project 1.06 1.06
Kbd Kbd-project 1.08 1.08
Kbd Kbd-project 1.10 1.10
Kbd Kbd-project 1.11 1.11
Kbd Kbd-project 1.12 1.12
Kbd Kbd-project 1.13 1.13
Kbd Kbd-project 1.14 1.14
Kbd Kbd-project * 1.14.1
Opensuse Opensuse 11.2 11.2
Opensuse Opensuse 11.3 11.3
Kbd Ubuntu hardy *

Potential Mitigations

  • Follow the principle of least privilege when assigning access rights to entities in a software system.
  • Denying access to a file can prevent an attacker from replacing that file with a link to a sensitive file. Ensure good compartmentalization in the system to provide protected areas that can be trusted.

References