Symlink Vulnerability in GNU Libtool: Risk of Arbitrary File Overwrites
Summary
CVE-2004-0256: GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp. Affects libtool versions < 1.5.6. Fixed in 1.5.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
GNU Libtool is a widely used software utility that helps manage the creation of shared libraries and simplifies the process of linking against them. It is essential for developers who need to compile and link programs across different platforms. However, prior to version 1.5.2, Libtool was susceptible to a security flaw that allowed local users to exploit symlink attacks, leading to potential file overwrites in temporary directories.
Vulnerability Detail
The vulnerability, identified as CVE-2004-0256, arises from the way GNU Libtool handles temporary files during the compilation process. Specifically, it allows local users to create symbolic links in the /tmp directory that point to arbitrary files. When Libtool attempts to write to these temporary files, it inadvertently overwrites the target files, which could lead to data loss or corruption. This issue is particularly concerning in multi-user environments where unprivileged users can exploit this flaw to manipulate files owned by other users.
How To Fix
Minimum fixed version
1.5.6
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libtoolTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can avoid using the /tmp directory for Libtool operations or ensure that the permissions on the /tmp directory are set to prevent unauthorized users from creating symlinks. Additionally, users can monitor the /tmp directory for suspicious symlink creations.
Conclusion
The CVE-2004-0256 vulnerability in GNU Libtool poses a significant risk to users, particularly in multi-user environments. Upgrading to version 1.5.6 or later is essential to mitigate this risk. Users are also encouraged to implement workarounds and monitor their systems for potential exploitation.
See every vulnerability recorded for libtool →
FAQ
CVE-2004-0256 is a vulnerability in GNU Libtool that allows local users to overwrite arbitrary files via a symlink attack on temporary directories.
You can use Vulert, which monitors open-source vulnerabilities in your software using a manifest file like package-lock.json. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The primary risk is the potential for data loss or corruption, as local users can overwrite files that they should not have access to, leading to security breaches or application failures.
Yes, you can temporarily avoid using the /tmp directory for Libtool operations or adjust permissions to prevent unauthorized symlink creation.
Versions of GNU Libtool prior to 1.5.6 are affected by this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for libtool.
