Description
The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across modifications, which allows local users to obtain sensitive information (/etc/sudoers contents) by reading this file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | smb4k | 0.8.0-1 | — |
| Debian 13 | smb4k | 0.8.0-1 | — |
References
- 23984 third-party-advisory
- [smb4k-announce] 20061221 Smb4K 0.8.0 and security fixes released mailing-list
- SUSE-SR:2007:002 vendor-advisory
- http://developer.berlios.de/project/shownotes.php?release_id=9777
- 22299 vdb-entry
- 24111 third-party-advisory
- 24469 third-party-advisory
- ADV-2007-0393 vdb-entry
- GLSA-200703-09 vendor-advisory
- 23937 third-party-advisory
- http://developer.berlios.de/project/shownotes.php?release_id=11902
- http://developer.berlios.de/project/shownotes.php?release_id=11706
- http://developer.berlios.de/bugs/?func=detailbug&bug_id=9630&group_id=769
- MDKSA-2007:042 vendor-advisory