esound contains a race condition

Advisory:	RHSA-2000:077-03
Type:	Security Advisory
Severity:	N/A
Issued on:	2000-10-06
Last updated on:	2000-10-06
Affected Products:	Red Hat Linux 6.2 Red Hat Linux 7.0
OVAL:	N/A
CVEs (cve.mitre.org):	CVE-2000-0864

Details

Esound, the Gnome sound server, contains a race condition that a malicious
user could exploit to change permissions of any file owned by the esound
user.

Esound, the sound daemon used for Gnome, creates a world-writable
directory, /tmp/.esd. This directory is owned by the user running esound,
and is used to store a socket which is used by programs connecting to the
sound server. During startup, this socket's permissions are adjusted. An
attacker on the system can theoretically create a symbolic link, and cause
any file or directory owned by the user running esound to be made
world writable.

The new packages fixes this race condition.

Solution

For each RPM for your particular architecture, run:

rpm -Fvh [filename]

where filename is the name of the RPM.

All active Gnome sessions should also be restarted after the upgrade is
applied.

Updated packages

Red Hat Linux 6.2

alpha:
ftp://updates.redhat.com/6.2/alpha/esound-0.2.20-0.alpha.rpm Missing file	`648746086daa7bbc6bef00697e62bf51`
ftp://updates.redhat.com/6.2/alpha/esound-devel-0.2.20-0.alpha.rpm Missing file	`8a7dbf7dabbd7d9ca2861c1ecf2b2d5f`

i386:
ftp://updates.redhat.com/6.2/i386/esound-0.2.20-0.i386.rpm Missing file	`962fa1129804f2d8470e1767a352f77f`
ftp://updates.redhat.com/6.2/i386/esound-devel-0.2.20-0.i386.rpm Missing file	`784ec77026228d31d823e619c1de78d8`

sparc:
ftp://updates.redhat.com/6.2/sparc/esound-0.2.20-0.sparc.rpm Missing file	`2127fdd7654b80506952dce08c3f5014`
ftp://updates.redhat.com/6.2/sparc/esound-devel-0.2.20-0.sparc.rpm Missing file	`0c191eee05a89dc0d12b3ca4981d2353`

Red Hat Linux 7.0

i386:
ftp://updates.redhat.com/7.0/i386/esound-0.2.20-1.i386.rpm Missing file	`a61209acb87ed7f4fa5b1d63d161c85d`
ftp://updates.redhat.com/7.0/i386/esound-devel-0.2.20-1.i386.rpm Missing file	`6b326c66d570ee59eda7c2daf0ab4721`

References

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0864
BugTraq ID: 1659 (http://www.securityfocus.com/bid/1659)

Keywords

Gnome

These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/