7367 matches found
CVE-2008-4970
CVE-2008-4970 affects the Lustre file system: the runiozone component on Lustre 1.6.5 allows a local user to overwrite arbitrary files through a symlink race against the temporary file /tmp/iozone.log. The underlying issue is a local-file overwrite via a symlink attack. Exploitation is local and ...
CVE-2008-4986
CVE-2008-4986 affects wims 3.62, enabling local users to overwrite arbitrary files via a symlink attack targeting temporary files: /tmp/env#####, /tmp/sed#####, and /tmp/referer-home.log. The issue is related to the coqweb and account.sh scripts. The connected records reiterate the same vulnerabi...
CVE-2008-4979
CVE-2008-4979 affects rancid 2.3.2~a8. A local user can cause a symlink attack to overwrite arbitrary files via /tmp/ipacct.#####.prefixes, /tmp/ipacct.#####.sorted, /tmp/ipacct.#####.pl, and /tmp/ipacct.##### temporary files. The connected sources confirm the four symlink targets and local-write...
CVE-2008-4966
linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/snap and b /tmp/nightly temporary files, related to the 1 maysnap and 2 maytest scripts...
CVE-2008-4976
ogle 0.9.2 and ogle-mmx 0.9.2 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/ogleaudio., b /tmp/oglecli., c /tmp/oglectrl., d /tmp/oglegui., e /tmp/oglempegps., f /tmp/oglempegvs., g /tmp/oglenav., and h /tmp/oglevout., temporary files, related to the 1...
CVE-2008-4956
fwbinstall in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent. temporary file...
CVE-2008-4953
firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.firehol-tmp--- and 2 /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create 1073741824PID-RANGE symlinks...
CVE-2008-4954
mead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/debugbuf temporary file...
CVE-2008-4950
gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments...
CVE-2008-4956
fwbinstall in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent. temporary file...
CVE-2008-4953
firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.firehol-tmp--- and 2 /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create 1073741824PID-RANGE symlinks...
CVE-2008-4959
geo-code in gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/geo.google, 2 /tmp/geo.yahoo, 3 /tmp/geo.coords, and 4 /tmp/geo.coords temporary files...
CVE-2008-4947
dhis-dummy-log-engine in dhis-server 5.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/dhis-dummy-log-engine.log temporary file...
CVE-2008-4942
audiolink in audiolink 0.05 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/audiolink.db.tmp and 2 /tmp/audiolink.tb.tmp temporary files...
CVE-2008-4942
audiolink in audiolink 0.05 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/audiolink.db.tmp and 2 /tmp/audiolink.tb.tmp temporary files...
CVE-2008-4935
asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview.pgm temporary file...
CVE-2008-4932
webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter. NOTE: this can be leveraged for code execution by writing to a file under the web...
CVE-2008-4937
senddoc in OpenOffice.org OOo 2.4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/log.obr. temporary file...
CVE-2008-4943
bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/error.txt, b /tmp/errores.txt, and possibly other temporary files, related to the 1 creabulmafact, 2 creabulmacont, and possibly 3 actualizabulmacont, 4 installbulmages-db, and 5...