rhsa-2011:1073
Vulnerability from csaf_redhat
Published
2011-07-21 09:22
Modified
2025-11-21 17:38
Summary
Red Hat Security Advisory: bash security, bug fix, and enhancement update

Notes

Topic
An updated bash package that fixes one security issue, several bugs, and adds one enhancement is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.
Details
Bash is the default shell for Red Hat Enterprise Linux. It was found that certain scripts bundled with the Bash documentation created temporary files in an insecure way. A malicious, local user could use this flaw to conduct a symbolic link attack, allowing them to overwrite the contents of arbitrary files accessible to the victim running the scripts. (CVE-2008-5374) This update fixes the following bugs: * When using the source builtin at location ".", occasionally, bash opted to preserve internal consistency and abort scripts. This caused bash to abort scripts that assigned values to read-only variables. This is now fixed to ensure that such scripts are now executed as written and not aborted. (BZ#448508) * When the tab key was pressed for auto-completion options for the typed text, the cursor moved to an unexpected position on a previous line if the prompt contained characters that cannot be viewed and a "\]". This is now fixed to retain the cursor at the expected position at the end of the target line after autocomplete options correctly display. (BZ#463880) * Bash attempted to interpret the NOBITS .dynamic section of the ELF header. This resulted in a "^D: bad ELF interpreter: No such file or directory" message. This is fixed to ensure that the invalid "^D" does not appear in the error message. (BZ#484809) * The $RANDOM variable in Bash carried over values from a previous execution for later jobs. This is fixed and the $RANDOM variable generates a new random number for each use. (BZ#492908) * When Bash ran a shell script with an embedded null character, bash's source builtin parsed the script incorrectly. This is fixed and bash's source builtin correctly parses shell script null characters. (BZ#503701) * The bash manual page for "trap" did not mention that signals ignored upon entry cannot be listed later. The manual page was updated for this update and now specifically notes that "Signals ignored upon entry to the shell cannot be trapped, reset or listed". (BZ#504904) * Bash's readline incorrectly displayed additional text when resizing the terminal window when text spanned more than one line, which caused incorrect display output. This is now fixed to ensure that text in more than one line in a resized window displays as expected. (BZ#525474) * Previously, bash incorrectly displayed "Broken pipe" messages for builtins like "echo" and "printf" when output did not succeed due to EPIPE. This is fixed to ensure that the unnecessary "Broken pipe" messages no longer display. (BZ#546529) * Inserts with the repeat function were not possible after a deletion in vi-mode. This has been corrected and, with this update, the repeat function works as expected after a deletion. (BZ#575076) * In some situations, bash incorrectly appended "/" to files instead of just directories during tab-completion, causing incorrect auto-completions. This is fixed and auto-complete appends "/" only to directories. (BZ#583919) * Bash had a memory leak in the "read" builtin when the number of fields being read was not equal to the number of variables passed as arguments, causing a shell script crash. This is fixed to prevent a memory leak and shell script crash. (BZ#618393) * /usr/share/doc/bash-3.2/loadables in the bash package contained source files which would not build due to missing C header files. With this update, the unusable (and unbuildable) source files were removed from the package. (BZ#663656) This update also adds the following enhancement: * The system-wide "/etc/bash.bash_logout" bash logout file is now enabled. This allows administrators to write system-wide logout actions for all users. (BZ#592979) Users of bash are advised to upgrade to this updated package, which contains backported patches to resolve these issues and add this enhancement.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated bash package that fixes one security issue, several bugs, and\nadds one enhancement is now available for Red Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having low\nsecurity impact. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available from the CVE link in\nthe References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Bash is the default shell for Red Hat Enterprise Linux.\n\nIt was found that certain scripts bundled with the Bash documentation\ncreated temporary files in an insecure way. A malicious, local user could\nuse this flaw to conduct a symbolic link attack, allowing them to overwrite\nthe contents of arbitrary files accessible to the victim running the\nscripts. (CVE-2008-5374)\n\nThis update fixes the following bugs:\n\n* When using the source builtin at location \".\", occasionally, bash\nopted to preserve internal consistency and abort scripts. This caused\nbash to abort scripts that assigned values to read-only variables.\nThis is now fixed to ensure that such scripts are now executed as\nwritten and not aborted. (BZ#448508)\n\n* When the tab key was pressed for auto-completion options for the typed\ntext, the cursor moved to an unexpected position on a previous line if\nthe prompt contained characters that cannot be viewed and a \"\\]\". This\nis now fixed to retain the cursor at the expected position at the end of\nthe target line after autocomplete options correctly display. (BZ#463880)\n\n* Bash attempted to interpret the NOBITS .dynamic section of the ELF\nheader. This resulted in a \"^D: bad ELF interpreter: No such\nfile or directory\" message. This is fixed to ensure that the invalid\n\"^D\" does not appear in the error message. (BZ#484809)\n\n* The $RANDOM variable in Bash carried over values from a previous\nexecution for later jobs. This is fixed and the $RANDOM variable\ngenerates a new random number for each use. (BZ#492908)\n\n* When Bash ran a shell script with an embedded null character, bash\u0027s\nsource builtin parsed the script incorrectly. This is fixed and\nbash\u0027s source builtin correctly parses shell script null characters.\n(BZ#503701)\n\n* The bash manual page for \"trap\" did not mention that signals ignored upon\nentry cannot be listed later. The manual page was updated for this update\nand now specifically notes that \"Signals ignored upon entry to the shell\ncannot be trapped, reset or listed\". (BZ#504904)\n\n* Bash\u0027s readline incorrectly displayed additional text when resizing\nthe terminal window when text spanned more than one line, which caused\nincorrect display output. This is now fixed to ensure that text in more\nthan one line in a resized window displays as expected. (BZ#525474)\n\n* Previously, bash incorrectly displayed \"Broken pipe\" messages for\nbuiltins like \"echo\" and \"printf\" when output did not succeed due to\nEPIPE. This is fixed to ensure that the unnecessary \"Broken pipe\"\nmessages no longer display. (BZ#546529)\n\n* Inserts with the repeat function were not possible after a deletion in\nvi-mode. This has been corrected and, with this update, the repeat function\nworks as expected after a deletion. (BZ#575076)\n\n* In some situations, bash incorrectly appended \"/\" to files instead of\njust directories during tab-completion, causing incorrect\nauto-completions. This is fixed and auto-complete appends \"/\" only to\ndirectories. (BZ#583919)\n\n* Bash had a memory leak in the \"read\" builtin when the number of fields\nbeing read was not equal to the number of variables passed as arguments,\ncausing a shell script crash. This is fixed to prevent a memory leak and\nshell script crash. (BZ#618393)\n\n* /usr/share/doc/bash-3.2/loadables in the bash package contained source\nfiles which would not build due to missing C header files. With this\nupdate, the unusable (and unbuildable) source files were removed from the\npackage. (BZ#663656)\n\nThis update also adds the following enhancement:\n\n* The system-wide \"/etc/bash.bash_logout\" bash logout file is now enabled.\nThis allows administrators to write system-wide logout actions for all\nusers. (BZ#592979)\n\nUsers of bash are advised to upgrade to this updated package, which\ncontains backported patches to resolve these issues and add this\nenhancement.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2011:1073",
        "url": "https://access.redhat.com/errata/RHSA-2011:1073"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#low",
        "url": "https://access.redhat.com/security/updates/classification/#low"
      },
      {
        "category": "external",
        "summary": "448508",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=448508"
      },
      {
        "category": "external",
        "summary": "463880",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=463880"
      },
      {
        "category": "external",
        "summary": "475474",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=475474"
      },
      {
        "category": "external",
        "summary": "484809",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=484809"
      },
      {
        "category": "external",
        "summary": "492908",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=492908"
      },
      {
        "category": "external",
        "summary": "503701",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=503701"
      },
      {
        "category": "external",
        "summary": "504904",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=504904"
      },
      {
        "category": "external",
        "summary": "525474",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=525474"
      },
      {
        "category": "external",
        "summary": "583919",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=583919"
      },
      {
        "category": "external",
        "summary": "592979",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=592979"
      },
      {
        "category": "external",
        "summary": "618393",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=618393"
      },
      {
        "category": "external",
        "summary": "663656",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=663656"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1073.json"
      }
    ],
    "title": "Red Hat Security Advisory: bash security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2025-11-21T17:38:35+00:00",
      "generator": {
        "date": "2025-11-21T17:38:35+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.6.12"
        }
      },
      "id": "RHSA-2011:1073",
      "initial_release_date": "2011-07-21T09:22:00+00:00",
      "revision_history": [
        {
          "date": "2011-07-21T09:22:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2011-07-21T06:37:04+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2025-11-21T17:38:35+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
                  "product_id": "5Client",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bash-0:3.2-32.el5.src",
                "product": {
                  "name": "bash-0:3.2-32.el5.src",
                  "product_id": "bash-0:3.2-32.el5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bash@3.2-32.el5?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bash-0:3.2-32.el5.x86_64",
                "product": {
                  "name": "bash-0:3.2-32.el5.x86_64",
                  "product_id": "bash-0:3.2-32.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bash@3.2-32.el5?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bash-debuginfo-0:3.2-32.el5.x86_64",
                "product": {
                  "name": "bash-debuginfo-0:3.2-32.el5.x86_64",
                  "product_id": "bash-debuginfo-0:3.2-32.el5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bash-0:3.2-32.el5.i386",
                "product": {
                  "name": "bash-0:3.2-32.el5.i386",
                  "product_id": "bash-0:3.2-32.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bash@3.2-32.el5?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bash-debuginfo-0:3.2-32.el5.i386",
                "product": {
                  "name": "bash-debuginfo-0:3.2-32.el5.i386",
                  "product_id": "bash-debuginfo-0:3.2-32.el5.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bash-0:3.2-32.el5.ia64",
                "product": {
                  "name": "bash-0:3.2-32.el5.ia64",
                  "product_id": "bash-0:3.2-32.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bash@3.2-32.el5?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bash-debuginfo-0:3.2-32.el5.ia64",
                "product": {
                  "name": "bash-debuginfo-0:3.2-32.el5.ia64",
                  "product_id": "bash-debuginfo-0:3.2-32.el5.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bash-0:3.2-32.el5.ppc",
                "product": {
                  "name": "bash-0:3.2-32.el5.ppc",
                  "product_id": "bash-0:3.2-32.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bash@3.2-32.el5?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bash-debuginfo-0:3.2-32.el5.ppc",
                "product": {
                  "name": "bash-debuginfo-0:3.2-32.el5.ppc",
                  "product_id": "bash-debuginfo-0:3.2-32.el5.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bash-0:3.2-32.el5.s390x",
                "product": {
                  "name": "bash-0:3.2-32.el5.s390x",
                  "product_id": "bash-0:3.2-32.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bash@3.2-32.el5?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bash-debuginfo-0:3.2-32.el5.s390x",
                "product": {
                  "name": "bash-debuginfo-0:3.2-32.el5.s390x",
                  "product_id": "bash-debuginfo-0:3.2-32.el5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bash-debuginfo@3.2-32.el5?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-0:3.2-32.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:bash-0:3.2-32.el5.i386"
        },
        "product_reference": "bash-0:3.2-32.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-0:3.2-32.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:bash-0:3.2-32.el5.ia64"
        },
        "product_reference": "bash-0:3.2-32.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-0:3.2-32.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:bash-0:3.2-32.el5.ppc"
        },
        "product_reference": "bash-0:3.2-32.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-0:3.2-32.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:bash-0:3.2-32.el5.s390x"
        },
        "product_reference": "bash-0:3.2-32.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-0:3.2-32.el5.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:bash-0:3.2-32.el5.src"
        },
        "product_reference": "bash-0:3.2-32.el5.src",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-0:3.2-32.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:bash-0:3.2-32.el5.x86_64"
        },
        "product_reference": "bash-0:3.2-32.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-debuginfo-0:3.2-32.el5.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:bash-debuginfo-0:3.2-32.el5.i386"
        },
        "product_reference": "bash-debuginfo-0:3.2-32.el5.i386",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-debuginfo-0:3.2-32.el5.ia64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:bash-debuginfo-0:3.2-32.el5.ia64"
        },
        "product_reference": "bash-debuginfo-0:3.2-32.el5.ia64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-debuginfo-0:3.2-32.el5.ppc as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:bash-debuginfo-0:3.2-32.el5.ppc"
        },
        "product_reference": "bash-debuginfo-0:3.2-32.el5.ppc",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-debuginfo-0:3.2-32.el5.s390x as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:bash-debuginfo-0:3.2-32.el5.s390x"
        },
        "product_reference": "bash-debuginfo-0:3.2-32.el5.s390x",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-debuginfo-0:3.2-32.el5.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
          "product_id": "5Client:bash-debuginfo-0:3.2-32.el5.x86_64"
        },
        "product_reference": "bash-debuginfo-0:3.2-32.el5.x86_64",
        "relates_to_product_reference": "5Client"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-0:3.2-32.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:bash-0:3.2-32.el5.i386"
        },
        "product_reference": "bash-0:3.2-32.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-0:3.2-32.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:bash-0:3.2-32.el5.ia64"
        },
        "product_reference": "bash-0:3.2-32.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-0:3.2-32.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:bash-0:3.2-32.el5.ppc"
        },
        "product_reference": "bash-0:3.2-32.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-0:3.2-32.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:bash-0:3.2-32.el5.s390x"
        },
        "product_reference": "bash-0:3.2-32.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-0:3.2-32.el5.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:bash-0:3.2-32.el5.src"
        },
        "product_reference": "bash-0:3.2-32.el5.src",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-0:3.2-32.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:bash-0:3.2-32.el5.x86_64"
        },
        "product_reference": "bash-0:3.2-32.el5.x86_64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-debuginfo-0:3.2-32.el5.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:bash-debuginfo-0:3.2-32.el5.i386"
        },
        "product_reference": "bash-debuginfo-0:3.2-32.el5.i386",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-debuginfo-0:3.2-32.el5.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:bash-debuginfo-0:3.2-32.el5.ia64"
        },
        "product_reference": "bash-debuginfo-0:3.2-32.el5.ia64",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-debuginfo-0:3.2-32.el5.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:bash-debuginfo-0:3.2-32.el5.ppc"
        },
        "product_reference": "bash-debuginfo-0:3.2-32.el5.ppc",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-debuginfo-0:3.2-32.el5.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:bash-debuginfo-0:3.2-32.el5.s390x"
        },
        "product_reference": "bash-debuginfo-0:3.2-32.el5.s390x",
        "relates_to_product_reference": "5Server"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bash-debuginfo-0:3.2-32.el5.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server:bash-debuginfo-0:3.2-32.el5.x86_64"
        },
        "product_reference": "bash-debuginfo-0:3.2-32.el5.x86_64",
        "relates_to_product_reference": "5Server"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2008-5374",
      "discovery_date": "2008-12-09T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "475474"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb#####.? temporary file, related to the (1) aliasconv.sh, (2) aliasconv.bash, and (3) cshtobash scripts.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bash: Insecure temporary file use in aliasconv.sh, aliasconv.bash, cshtobash (symlink attack)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue has been addressed in Red Hat Enterprise Linux 4 via RHSA-2011:0261 advisory. This issue has been addressed in Red Hat Enterprise Linux 5 via RHSA-2011:1073 advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client:bash-0:3.2-32.el5.i386",
          "5Client:bash-0:3.2-32.el5.ia64",
          "5Client:bash-0:3.2-32.el5.ppc",
          "5Client:bash-0:3.2-32.el5.s390x",
          "5Client:bash-0:3.2-32.el5.src",
          "5Client:bash-0:3.2-32.el5.x86_64",
          "5Client:bash-debuginfo-0:3.2-32.el5.i386",
          "5Client:bash-debuginfo-0:3.2-32.el5.ia64",
          "5Client:bash-debuginfo-0:3.2-32.el5.ppc",
          "5Client:bash-debuginfo-0:3.2-32.el5.s390x",
          "5Client:bash-debuginfo-0:3.2-32.el5.x86_64",
          "5Server:bash-0:3.2-32.el5.i386",
          "5Server:bash-0:3.2-32.el5.ia64",
          "5Server:bash-0:3.2-32.el5.ppc",
          "5Server:bash-0:3.2-32.el5.s390x",
          "5Server:bash-0:3.2-32.el5.src",
          "5Server:bash-0:3.2-32.el5.x86_64",
          "5Server:bash-debuginfo-0:3.2-32.el5.i386",
          "5Server:bash-debuginfo-0:3.2-32.el5.ia64",
          "5Server:bash-debuginfo-0:3.2-32.el5.ppc",
          "5Server:bash-debuginfo-0:3.2-32.el5.s390x",
          "5Server:bash-debuginfo-0:3.2-32.el5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-5374"
        },
        {
          "category": "external",
          "summary": "RHBZ#475474",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=475474"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-5374",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-5374"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-5374",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-5374"
        }
      ],
      "release_date": "2008-08-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2011-07-21T09:22:00+00:00",
          "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259",
          "product_ids": [
            "5Client:bash-0:3.2-32.el5.i386",
            "5Client:bash-0:3.2-32.el5.ia64",
            "5Client:bash-0:3.2-32.el5.ppc",
            "5Client:bash-0:3.2-32.el5.s390x",
            "5Client:bash-0:3.2-32.el5.src",
            "5Client:bash-0:3.2-32.el5.x86_64",
            "5Client:bash-debuginfo-0:3.2-32.el5.i386",
            "5Client:bash-debuginfo-0:3.2-32.el5.ia64",
            "5Client:bash-debuginfo-0:3.2-32.el5.ppc",
            "5Client:bash-debuginfo-0:3.2-32.el5.s390x",
            "5Client:bash-debuginfo-0:3.2-32.el5.x86_64",
            "5Server:bash-0:3.2-32.el5.i386",
            "5Server:bash-0:3.2-32.el5.ia64",
            "5Server:bash-0:3.2-32.el5.ppc",
            "5Server:bash-0:3.2-32.el5.s390x",
            "5Server:bash-0:3.2-32.el5.src",
            "5Server:bash-0:3.2-32.el5.x86_64",
            "5Server:bash-debuginfo-0:3.2-32.el5.i386",
            "5Server:bash-debuginfo-0:3.2-32.el5.ia64",
            "5Server:bash-debuginfo-0:3.2-32.el5.ppc",
            "5Server:bash-debuginfo-0:3.2-32.el5.s390x",
            "5Server:bash-debuginfo-0:3.2-32.el5.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2011:1073"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "HIGH",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 1.2,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "5Client:bash-0:3.2-32.el5.i386",
            "5Client:bash-0:3.2-32.el5.ia64",
            "5Client:bash-0:3.2-32.el5.ppc",
            "5Client:bash-0:3.2-32.el5.s390x",
            "5Client:bash-0:3.2-32.el5.src",
            "5Client:bash-0:3.2-32.el5.x86_64",
            "5Client:bash-debuginfo-0:3.2-32.el5.i386",
            "5Client:bash-debuginfo-0:3.2-32.el5.ia64",
            "5Client:bash-debuginfo-0:3.2-32.el5.ppc",
            "5Client:bash-debuginfo-0:3.2-32.el5.s390x",
            "5Client:bash-debuginfo-0:3.2-32.el5.x86_64",
            "5Server:bash-0:3.2-32.el5.i386",
            "5Server:bash-0:3.2-32.el5.ia64",
            "5Server:bash-0:3.2-32.el5.ppc",
            "5Server:bash-0:3.2-32.el5.s390x",
            "5Server:bash-0:3.2-32.el5.src",
            "5Server:bash-0:3.2-32.el5.x86_64",
            "5Server:bash-debuginfo-0:3.2-32.el5.i386",
            "5Server:bash-debuginfo-0:3.2-32.el5.ia64",
            "5Server:bash-debuginfo-0:3.2-32.el5.ppc",
            "5Server:bash-debuginfo-0:3.2-32.el5.s390x",
            "5Server:bash-debuginfo-0:3.2-32.el5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "bash: Insecure temporary file use in aliasconv.sh, aliasconv.bash, cshtobash (symlink attack)"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.