Arbitrary File Overwrite using less command

Vulnerability

An arbitrary file overwrite vulnerability exists in the less command of Brocade Fabric OS versions prior to v9.1.1c and v9.2.0 [1]. An authenticated local attacker with low privileges can exploit this flaw to overwrite system files, potentially leading to denial of service or privilege escalation [1].

Exploitation

An attacker must have local access to the Brocade Fabric OS command-line interface with a low-privileged account [1]. The attacker can then invoke the less command in a way that causes the overwrite of arbitrary system files [1]. No user interaction beyond the attacker's own actions is required.

Impact

Successful exploitation allows the attacker to overwrite system files, which can result in a denial of service (affecting availability) or a high impact on integrity [1]. The attacker does not gain direct access to confidential information, but the overwrite could compromise the system's operation and security [1].

Mitigation

The vulnerability is fixed in Brocade Fabric OS versions v9.1.1c and v9.2.0 [1]. Administrators should upgrade to these or later versions. No workarounds are mentioned in the available references [1].