Description
alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | mon | 0.99.2-9+etch2 | DSA-1648-1 |
Advisories 1
- DSA-1648-1 mon - insecure temporary files Debian Security (DSA / DLA) · Mar 9, 2026
References
- 32183 third-party-advisory
- [debian-devel] 20080812 Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages mailing-list
- DSA-1648 vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496398
- mon-testalert-symlink(45738) vdb-entry
- [oss-security] 20081030 CVE requests: tempfile issues for aview, mgetty, openoffice, crossfire mailing-list
- https://bugs.gentoo.org/show_bug.cgi?id=235770
- http://dev.gentoo.org/~rbu/security/debiantemp/mon
- MDVSA-2008:214 vendor-advisory
- 31597 vdb-entry