Bug 114011 – ebookmerge unsecure temporary directory creation

• Status: RESOLVED INVALID
• Product: Gentoo Security

[Description Romang 2005-11-30 03:50:19 UTC]

Hello,

The package is actually masked but better to prevent

Take a look at : /usr/bin/ebookmerge.sh

12 TMPDIR="/var/tmp/ebooktmp"

85 mktmp () {
86     [ ! -d ${TMPDIR} ] && mkdir -p ${TMPDIR}
87 }

167 if [ -n "$optd" ]
168 then        
169     [ -z "$*" ] && eerror "Miss NAME parameter." && exit 1
170     mktmp
171     cd ${DOWNDIR}
172     einfo "Dowloading eBook $optd in $DOWNDIR..."
173     wget -q -c http://lidn.sourceforge.net/books_download/$optd
174     einfo "Dowloaded."
175 fi

Regards.

[Comment 1 Tavis Ormandy (RETIRED) 2005-12-18 12:40:24 UTC]

there is no such thing as insecure directory creation, the mkdir() syscall doesnt follow symlinks or anything like that. 

Marking INVALID, please REOPEN if i've misunderstood.