Package: iceweasel
Version: 2.0.0.1+dfsg-2
Severity: important
When iceweasel starts external programs (mime handlers), it leaks an
enourmous amount of open filehandles. example, this is an rxvt process
started from iceweasel:
lr-x------ 1 root root 64 2007-02-12 16:08 0 -> /dev/null
l-wx------ 1 root root 64 2007-02-12 16:08 1 -> pipe:[24142802]
l-wx------ 1 root root 64 2007-02-12 16:08 10 -> pipe:[24142818]
l-wx------ 1 root root 64 2007-02-12 16:08 11 ->
/root/.mozilla/firefox/8vydpew9.default/.parentlock
lr-x------ 1 root root 64 2007-02-12 16:08 12 -> pipe:[24142859]
l-wx------ 1 root root 64 2007-02-12 16:08 13 -> pipe:[24142822]
lr-x------ 1 root root 64 2007-02-12 16:08 14 -> pipe:[24142823]
l-wx------ 1 root root 64 2007-02-12 16:08 15 -> pipe:[24142823]
lr-x------ 1 root root 64 2007-02-12 16:08 16 -> pipe:[24142824]
l-wx------ 1 root root 64 2007-02-12 16:08 17 -> pipe:[24142824]
l-wx------ 1 root root 64 2007-02-12 16:08 18 -> pipe:[24142859]
lr-x------ 1 root root 64 2007-02-12 16:08 19 -> pipe:[24142865]
l-wx------ 1 root root 64 2007-02-12 16:08 2 -> pipe:[24142802]
lr-x------ 1 root root 64 2007-02-12 16:08 20 -> pipe:[24142860]
lr-x------ 1 root root 64 2007-02-12 16:08 21 -> /dev/urandom
l-wx------ 1 root root 64 2007-02-12 16:08 22 -> pipe:[24142860]
lrwx------ 1 root root 64 2007-02-12 16:08 23 ->
/root/.mozilla/firefox/8vydpew9.default/history.dat
l-wx------ 1 root root 64 2007-02-12 16:08 24 -> pipe:[24142865]
lr-x------ 1 root root 64 2007-02-12 16:08 25 -> pipe:[24142866]
l-wx------ 1 root root 64 2007-02-12 16:08 26 -> pipe:[24142866]
lr-x------ 1 root root 64 2007-02-12 16:08 27 -> pipe:[24142867]
l-wx------ 1 root root 64 2007-02-12 16:08 28 -> pipe:[24142867]
l-wx------ 1 root root 64 2007-02-12 16:08 29 -> pipe:[24143699]
lr-x------ 1 root root 64 2007-02-12 16:08 3 -> pipe:[24143699]
lrwx------ 1 root root 64 2007-02-12 16:08 30 -> socket:[24143700]
lrwx------ 1 root root 64 2007-02-12 16:08 31 -> /dev/ptmx
lr-x------ 1 root root 64 2007-02-12 16:08 32 -> /dev/urandom
lrwx------ 1 root root 64 2007-02-12 16:08 33 ->
/root/.mozilla/firefox/8vydpew9.default/search.sqlite
lr-x------ 1 root root 64 2007-02-12 16:08 34 ->
/root/.mozilla/firefox/8vydpew9.default/extensions/{dc572301-7619-498c-a57d-39143191b318}/chrome/tabmixplus.jar
lr-x------ 1 root root 64 2007-02-12 16:08 35 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/scrollbar.xml
lr-x------ 1 root root 64 2007-02-12 16:08 36 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/tabbrowser.xml
lr-x------ 1 root root 64 2007-02-12 16:08 37 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/tabbox.xml
lr-x------ 1 root root 64 2007-02-12 16:08 38 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/stringbundle.xml
lr-x------ 1 root root 64 2007-02-12 16:08 39 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/notification.xml
l-wx------ 1 root root 64 2007-02-12 16:08 4 ->
/root/.mozilla/firefox/8vydpew9.default/.parentlock
lr-x------ 1 root root 64 2007-02-12 16:08 40 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/browser.xml
lr-x------ 1 root root 64 2007-02-12 16:08 41 ->
/root/.mozilla/firefox/8vydpew9.default/extensions/{37E4D8EA-8BDA-4831-8EA1-89053939A250}/chrome/pdfdownload.jar
lr-x------ 1 root root 64 2007-02-12 16:08 42 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/popup.xml
lr-x------ 1 root root 64 2007-02-12 16:08 43 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/text.xml
lr-x------ 1 root root 64 2007-02-12 16:08 44 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/general.xml
lr-x------ 1 root root 64 2007-02-12 16:08 45 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/autocomplete.xml
lr-x------ 1 root root 64 2007-02-12 16:08 46 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/tree.xml
lr-x------ 1 root root 64 2007-02-12 16:08 47 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/toolbar.xml
lr-x------ 1 root root 64 2007-02-12 16:08 48 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/menu.xml
lr-x------ 1 root root 64 2007-02-12 16:08 49 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/splitter.xml
lr-x------ 1 root root 64 2007-02-12 16:08 5 ->
/usr/share/X11/locale/en_US.UTF-8/Compose
lr-x------ 1 root root 64 2007-02-12 16:08 50 ->
/usr/share/iceweasel/chrome/toolkit/content/global/platformHTMLBindings.xml
lr-x------ 1 root root 64 2007-02-12 16:08 51 ->
/root/.mozilla/firefox/8vydpew9.default/XUL.mfasl
lr-x------ 1 root root 64 2007-02-12 16:08 52 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/toolbarbutton.xml
lr-x------ 1 root root 64 2007-02-12 16:08 53 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/button.xml
lrwx------ 1 root root 64 2007-02-12 16:08 54 ->
/root/.mozilla/firefox/8vydpew9.default/search.sqlite
lr-x------ 1 root root 64 2007-02-12 16:08 55 ->
/usr/share/iceweasel/chrome/classic/skin/classic/browser/browser.xml
lr-x------ 1 root root 64 2007-02-12 16:08 56 -> pipe:[24142907]
lr-x------ 1 root root 64 2007-02-12 16:08 57 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/progressmeter.xml
l-wx------ 1 root root 64 2007-02-12 16:08 58 -> pipe:[24142907]
lr-x------ 1 root root 64 2007-02-12 16:08 6 -> pipe:[24142817]
lr-x------ 1 root root 64 2007-02-12 16:08 60 ->
/usr/share/iceweasel/chrome/toolkit/content/global/bindings/textbox.xml
lrwx------ 1 root root 64 2007-02-12 16:08 62 ->
/root/.mozilla/firefox/8vydpew9.default/formhistory.dat
lrwx------ 1 root root 64 2007-02-12 16:08 63 ->
/root/.mozilla/firefox/8vydpew9.default/Cache/_CACHE_MAP_
lr-x------ 1 root root 64 2007-02-12 16:08 64 ->
/usr/share/iceweasel/chrome/browser/content/browser/search/search.xml
lrwx------ 1 root root 64 2007-02-12 16:08 65 ->
/root/.mozilla/firefox/8vydpew9.default/Cache/_CACHE_001_
lrwx------ 1 root root 64 2007-02-12 16:08 66 ->
/root/.mozilla/firefox/8vydpew9.default/Cache/_CACHE_002_
lrwx------ 1 root root 64 2007-02-12 16:08 67 ->
/root/.mozilla/firefox/8vydpew9.default/Cache/_CACHE_003_
lrwx------ 1 root root 64 2007-02-12 16:08 68 -> socket:[24143680]
lrwx------ 1 root root 64 2007-02-12 16:08 69 ->
/root/.mozilla/firefox/8vydpew9.default/urlclassifier2.sqlite
l-wx------ 1 root root 64 2007-02-12 16:08 7 -> pipe:[24142817]
lrwx------ 1 root root 64 2007-02-12 16:08 70 ->
/root/.mozilla/firefox/8vydpew9.default/urlclassifier2.sqlite
lrwx------ 1 root root 64 2007-02-12 16:08 71 -> socket:[24143016]
lr-x------ 1 root root 64 2007-02-12 16:08 73 -> inotify
lr-x------ 1 root root 64 2007-02-12 16:08 74 -> pipe:[24143064]
l-wx------ 1 root root 64 2007-02-12 16:08 75 -> pipe:[24143064]
lr-x------ 1 root root 64 2007-02-12 16:08 8 -> pipe:[24142822]
lr-x------ 1 root root 64 2007-02-12 16:08 9 -> pipe:[24142818]
That means that those subprocesses have access to a lot of iceweasel
files, even when e.g. running under another user id. (imagine setting
up to run acrobat under userid nobody because you do not trust it, but
do trust iceweasel). This is a leak of informstion and potentially even
allows exploits.
-- System Information:
Debian Release: 4.0
APT prefers unstable
APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17.6
Locale: LANG=C, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Versions of packages iceweasel depends on:
ii debianutils 2.15.3 Miscellaneous utilities specific t
ii fontconfig 2.4.1-2 generic font configuration library
ii libatk1.0-0 1.12.3-1 The ATK accessibility toolkit
hi libc6 2.3.6.ds1-10 GNU C Library: Shared libraries
ii libcairo2 1.2.4-4 The Cairo 2D vector graphics libra
ii libfontconfig1 2.4.1-2 generic font configuration library
hi libfreetype6 2.2.1-2 FreeType 2 font engine, shared lib
ii libglib2.0-0 2.12.6-2 The GLib library of C routines
ii libgtk2.0-0 2.8.20-3 The GTK+ graphical user interface
ii libjpeg62 6b-13 The Independent JPEG Group's JPEG
ii libmyspell3c2 1:3.1-18 MySpell spellchecking library
ii libpango1.0-0 1.14.8-2 Layout and rendering of internatio
ii libpng12-0 1.2.15~beta5-1 PNG library - runtime
ii libstdc++6 4.1.1-21 The GNU Standard C++ Library v3
ii libx11-6 2:1.0.3-4 X11 client-side library
ii libxft2 2.1.8.2-8 FreeType-based font drawing librar
ii libxinerama1 1:1.0.1-4.1 X11 Xinerama extension library
ii libxp6 1:1.0.0.xsf1-1 X Printing Extension (Xprint) clie
ii libxrender1 1:0.9.1-3 X Rendering Extension client libra
ii libxt6 1:1.0.2-2 X11 toolkit intrinsics library
ii psmisc 22.3-1 Utilities that use the proc filesy
ii zlib1g 1:1.2.3-13 compression library - runtime
iceweasel recommends no packages.
-- no debconf information
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
