1554 matches found
RuboCop gem Insecure use of /tmp
RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users...
CVE-2017-15288
The compilation daemon in Scala before 2.10.7, 2.11.x before 2.11.12, and 2.12.x before 2.12.4 uses weak permissions for private files in /tmp/scala-devel/$USER:shared/scalac-compile-server-port, which allows local users to write to arbitrary class files and consequently gain privileges...
Phusion Passenger Denial of Service
Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a denial of service prevent application start or gain privileges by pre-creating a temporary "config" file in a directory with a predictable name in /tmp/ before it is used by the gem...
Code injection
Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage...
CVE-2014-0047
Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage...
CVE-2014-0047
Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage...
CVE-2014-0047
Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage...
CVE-2014-0047
Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage...
CVE-2014-0047
CVE-2014-0047 affects Docker before 1.5, where local users can cause unspecified impact via vectors involving unsafe /tmp usage. The available connected documents confirm the vulnerable condition and local-privilege context but do not provide concrete exploitation details or a confirmed fix/versi...
CVE-2014-0047
Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage...
PT-2017-5769
Name of the Vulnerable Software and Affected Versions: Docker versions prior to 1.5 Description: The issue allows local users to have an unspecified impact through vectors involving unsafe /tmp usage. Recommendations: For Docker versions prior to 1.5, update to version 1.5 or later to resolve the...
CVE-2014-0047: Undefined Security Weakness
Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage...
Updated open-vm-tools packages fix security vulnerability
It was discovered that open-vm-tools has multiple /tmp race conditions in the libDeployPkg component, allowing an unprivileged local user in a guest to cause a denial of service through file system manipulation, or, possibly, increase privileges CVE-2015-5191...
chkrootkit: Local privilege escalation
Background chkrootkit is a tool to locally check for signs of a rootkit. Description When /tmp is mounted without the noexec option chkrootkit will execute files in /tmp with root privileges. Impact A local attacker could possibly execute arbitrary code with root privileges. Workaround Users shou...
CVE-2015-1590
The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...
CVE-2015-1590
The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...
CVE-2015-1590: Undefined Security Weakness
The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...
PT-2017-6498
Name of the Vulnerable Software and Affected Versions Kamailio versions prior to 4.3.0 Description The issue concerns the kamcmd administrative utility and its default configuration in Kamailio, which utilizes the /tmp/kamailio ctl directory. Recommendations For versions prior to 4.3.0, consider...