293 matches found
Некорректная работа с идентификаторами сеансов в PHP4 (session spoofing)
Идентификаторы сеансов хранятся в директории /tmp...
SuSE 6.x7.0 - MkDir Error Handling rctab Race Condition (1)
SuSE 6.x7.0 - MkDir Error Handling rctab Race Condition 1 source: https://www.securityfocus.com/bid/2207/info rctab is the Run Control Tab script included with the SuSE distribution of the Linux Operating System. SuSE is a freely available, Open Source Operating system maintained by SuSE...
SuSE 6.x/7.0 - MkDir Error Handling rctab Race Condition (1)
source: https://www.securityfocus.com/bid/2207/info rctab is the Run Control Tab script included with the SuSE distribution of the Linux Operating System. SuSE is a freely available, Open Source Operating system maintained by SuSE Incorporated. A race condition in the rctab script could allow an...
SuSE 6.x/7.0 - MkDir Error Handling rctab Race Condition (2)
source: https://www.securityfocus.com/bid/2207/info rctab is the Run Control Tab script included with the SuSE distribution of the Linux Operating System. SuSE is a freely available, Open Source Operating system maintained by SuSE Incorporated. A race condition in the rctab script could allow an...
KTH Kerberos filesystem race condition on tickets stored in /tmp
Overview There may be a race condition during the creation of Kerberos ticket files in the /tmp directory. This race condition may allow intruders with local access to the system to gain root privileges. Description During the creation of ticket files in the /tmp directory, a sequence of calls...
DoS через AnswerBook 2
При некоторых условиях не удаляются временные файлы, что приводит к переполнению /tmp...
CVE-2000-0718
A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed...
CVE-2000-0718
A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed...
CVE-2000-0363
Linux cdwtools 093 and earlier contain a local privilege escalation vulnerability: local users can gain root privileges via the /tmp directory. The issue is described across CVE-2000-0363 records and NVD, with a base score of 6.2 (MEDIUM). Exploitation details are not provided in the supplied doc...
Possible symlink problems with Netscape 4.73
It appears that Netscape 4.73 and earlier versions incorrectly creates a temporary file in '/tmp' when importing certificates: ... open"/tmp/tmp3919AA5000A07DC", OWRONLY|OCREAT|OTRUNC, 0666 = 25 fchmod25, 0600 = 0 fstat25, stmode=0,stsize=0, ... = 0 ... Netscape doesn't try to stat/lstat the file...
CVE-2000-0293
aaabase in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaabase when it deletes expired files from the /tmp directory...