69 matches found
GLSA-200901-14 : Scilab: Insecure temporary file usage
The remote host is affected by the vulnerability described in GLSA-200901-14 Scilab: Insecure temporary file usage Dmitry E. Oboukhov reported an insecure temporary file usage within the scilink, scidoc and scidem scripts. Impact : A local attacker could perform symlink attacks to overwrite...
CVE-2008-4983
scilab-bin 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/SciLink1, b /tmp/SciLink2, c /tmp/SciLink3, d /tmp/., e /tmp/..res, f /tmp/..err, and g /tmp/..diff temporary files, related to the 1 scilink, 2 scidoc, and 3 scidem scripts...
CVE-2008-4983
CVE-2008-4983 affects scilab-bin 4.1.2. A local attacker can exploit insecure temporary file handling (symlink attacks) in the scilink, scidoc and scidem scripts to overwrite arbitrary files under /tmp and potentially affect files owned by the running user. Remediation per Gentoo GLSA 200901-14 i...
openSUSE 10 Security Update : xdg-utils (xdg-utils-4983)
xdg-open and xdg-email didn't properly check their arguments. Therefore e.g. URLs passed to those programs could contain shell code that got executed CVE-2008-0386. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
CVE-2007-4983
CVE-2007-4983 describes a directory-traversal in the JetAudio.Interface.1 ActiveX control (JetFlExt.dll) used by JetAudio 7.0.3 Basic and 7.0.3.3016. By sending a .\ to the second argument of the DownloadFromMusicStore method, an attacker can create or overwrite arbitrary local files. The note in...
CVE-2007-4983
Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows remote attackers to create or overwrite arbitrary local files via a ..\ dot dot backslash in the second argument to the DownloadFromMusicStore method. NOTE:...
MS:9AD63C88-77D1-4983-A3F1-B21293996FAD
...