Insecure Permissions in xfs_fsr Temporary Directory
Summary
CVE-2007-2654: xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems. Affects xfsdump versions < 2.2.45-1. Fixed in 2.2.45-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The xfsdump package is a utility used for creating and restoring backups of XFS filesystems. It is commonly used in Debian distributions. This package provides various tools for managing XFS filesystems, including xfs_fsr, which is responsible for defragmenting the filesystem. However, a vulnerability exists in the way xfs_fsr creates a temporary directory with insecure permissions.
Vulnerability Detail
The vulnerability, identified as CVE-2007-2654, allows local users to read or overwrite arbitrary files on XFS filesystems. When xfs_fsr is executed, it creates a temporary directory named .fsr. However, the permissions set for this directory are insecure, allowing any local user to access its contents. This can lead to unauthorized access or modification of sensitive files on the filesystem.
How To Fix
Minimum fixed version
2.2.45-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade xfsdumpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. However, users can mitigate the risk by ensuring that only trusted users have access to the system and its files. Additionally, regular monitoring and auditing of file permissions can help detect any unauthorized access or modifications.
Conclusion
Insecure permissions in the xfs_fsr temporary directory can lead to unauthorized access or modification of files on XFS filesystems. It is crucial to update the xfsdump package to the recommended version to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for xfsdump →
FAQ
The vulnerability allows local users to read or overwrite arbitrary files on XFS filesystems. This can lead to unauthorized access to sensitive information or the modification of critical system files.
The vulnerability is specific to the xfsdump package used in Debian distributions. Other operating systems or distributions may have different implementations of xfsdump and may not be affected by this specific vulnerability.
There are no known exploits for this vulnerability at the time of this report. However, it is important to apply the recommended fix to prevent any potential exploitation.
No, this vulnerability can only be exploited by local users with access to the system. Remote exploitation is not possible.
For more detailed information about this vulnerability, including technical details and the specific fix implemented, refer to the provided source link.
Related vulnerabilities
Recent vulnerabilities recorded for xfsdump.
