Skype Temporary File Arbitrary File Overwrite

Binary data 3070.prm...

CVE-2002-2001

The CVE relates to jmcce 1.3.8 on Mandrake 8.1. It creates log files in /tmp with predictable names, enabling a local user to perform a symlink attack to overwrite arbitrary files. Root-level risk is implied by Mandrake advisory context (jmcce runs with elevated privileges and writes logs to a wo...

CVE-2005-2240

xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file...

CVE-2005-2230

Electronic Mail Operator elmo 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite arbitrary files...

CVE-2005-2231

High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-2240

xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file...

CVE-2005-2240

xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file...

CVE-2005-1916

linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files...

CVE-2005-1916

linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files...

PT-2005-2872 · Ekg · Ekg

Name of the Vulnerable Software and Affected Versions: ekg versions 2005-06-05 and earlier Description: The issue allows local users to overwrite or create arbitrary files via a symlink attack on temporary files. This is related to the linki.py component in ekg. Recommendations: For ekg versions...

GNATS - gen-index

Name: GNATS - gen-index Vendor URL: http://www.gnu.org/software/gnats Author: Adam Zabrocki [email protected] Date: June 16, 2005 Issue: GNATS - the GNU problem report management system allows attacker to overwrite files with privileges suid root when compiled from sources and there isn't in system...

CVE-2005-1917

CVE-2005-1917 affects kpopper 1.0 and earlier. Local users can create and overwrite arbitrary files through a symlink attack on the .popper-new temporary file due to insecure temporary file handling. Impact is described as low; exploitation is indicated in public advisories. Affected versions: kp...

[SA15877] Avaya CMS/IR lpadmin Arbitrary File Overwrite Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-2054

Unknown vulnerability in RealPlayer 10 and 10.5 6.0.12.1040-1069 and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX controls via a crafted MP3 file...

CVE-2005-2054

Affected software: RealPlayer 10/10.5 (6.0.12.1040–1069) and RealOne Player v1/v2. Description indicates a vulnerability that could let remote attackers overwrite arbitrary files or run arbitrary ActiveX controls via a crafted MP3 file. Root cause and patch details are not provided in the documen...

RealPlayer multiple vulnerabilities

Heap overflow on RealText format parsing. Heap overflow on AVI files parsing. Possibility to overwrite local files, ActiveX execution from MP3 file...

CVE-2001-1494

CVE-2001-1494 affects util-linux (and mount) prior to versions updated in RHSA-2005:782. The issue is a hardlink-based flaw in the script command: a local attacker can create a hardlink named typescript in a writable directory, and when the script command is run by root, the attacker’s file can b...

[SA15723] Sun Solaris lpadmin Arbitrary File Overwrite Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[ GLSA 200506-08 ] GNU shtool, ocaml-mysql: Insecure temporary file creation

Gentoo Linux Security Advisory GLSA 200506-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GNU shtool, ocaml-mysql: Insecure temporary file creation

Background GNU shtool is a compilation of small shell scripts into a single shell tool. The ocaml-mysql package includes the GNU shtool code. Description Eric Romang has discovered that GNU shtool insecurely creates temporary files with predictable filenames CAN-2005-1751. On closer inspection,...