[SA13640] LPRng "lprng_certs.sh" Script Insecure Temporary File Creation

TITLE: LPRng "lprngcerts.sh" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13640 VERIFY ADVISORY: http://secunia.com/advisories/13640/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: LPRng 3.x http://secunia.com/product/4454/ DESCRIPTION: Javier...

DSA-615-1 debmake - insecure temporary file

Bulletin has no description...

Cscope 15.5 - Symlink

/ RXcscope exploit version 15.5 and minor / include include include include define BSIZE 64 int mainint ac, char av pidt cur; uint i=0, lst; char bufferBSIZE + 1; fprintfstdout, "\n -- Cscope Exploit --\n"\ " version 15.5 and minor \n" \ " Gangstuck / Psirac\n" \ " \n\n"; if ac != 3 fprintfstderr...

Cscope 15.5 - Symlink

Cscope 15.5 - Symlink / RXcscope exploit version 15.5 and minor / include include include include define BSIZE 64 int mainint ac, char av pidt cur; uint i=0, lst; char bufferBSIZE + 1; fprintfstdout, "\n -- Cscope Exploit --\n"\ " version 15.5 and minor \n" \ " Gangstuck / Psirac\n" \ " \n\n"; if...

Mandrake Linux Security Advisory : postgresql (MDKSA-2004:149)

The Trustix development team found insecure temporary file creation problems in a script included in the postgresql package. This could allow an attacker to trick a user into overwriting arbitrary files he has access to. The updated packages have been patched to prevent this problem. %NASLMINLEVE...

mirrorselect: Insecure temporary file creation

Background mirrorselect is a tool to help select distfiles mirrors for Gentoo. Description Ervin Nemeth discovered that mirrorselect creates temporary files in world-writable directories with predictable names. Impact A local attacker could create symbolic links in the temporary files directory,...

Perl: Insecure temporary file creation

Background Perl is a stable, cross-platform programming language created by Larry Wall. Description Some Perl modules create temporary files in world-writable directories with predictable names. Impact A local attacker could create symbolic links in the temporary files directory, pointing to a...

GLSA-200412-05 : mirrorselect: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200412-05 mirrorselect: Insecure temporary file creation Ervin Nemeth discovered that mirrorselect creates temporary files in world-writable directories with predictable names. Impact : A local attacker could create symbolic links...

Debian DSA-603-1 : openssl - insecure temporary file

Trustix developers discovered insecure temporary file creation in a supplemental script derchop of the openssl package which may allow local users to overwrite files via a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

CVE-2004-1032

CVE-2004-1032 affects Fcron (notably versions 2.0.1, 2.9.4, and possibly earlier). The issue lies in fcronsighup: when a target filename has a large number of leading slashes, Fcron does not correctly append fcrontab.sig, allowing a local user to delete arbitrary files or create arbitrary empty f...

FreeBSD : postgresql-contrib -- insecure temporary file creation (153)

The following package needs to be updated: postgresql-contrib %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated by freebsdpkg6a164d842f7f11d9a9e70001020eed82.nasl. Disabled on 2011/10/02. C Tenable Network Security, Inc. This script contains information extracted from VuXML :...

Cscope 13.0/15.x - Insecure Temporary File Creation (2)

// source: https://www.securityfocus.com/bid/11697/info Cscope creates temporary files in an insecure way. A design error causes the application to fail to verify the presence of a file before writing to it. During execution, the utility reportedly creates temporary files in the system's temporar...

Cscope 13.0/15.x - Insecure Temporary File Creation (1)

source: https://www.securityfocus.com/bid/11697/info Cscope creates temporary files in an insecure way. A design error causes the application to fail to verify the presence of a file before writing to it. During execution, the utility reportedly creates temporary files in the system's temporary...

Debian DSA-577-1 : postgresql - insecure temporary file

Trustix Security Engineers identified insecure temporary file creation in a script included in the postgresql suite, an object-relational SQL database. This could lead an attacker to trick a user to overwrite arbitrary files he has write access to. %NASLMINLEVEL 70300 C Tenable Network Security,...

Saleslogix-1-2004.txt

Agenda Security Services Security Vulnerability Advisory Product: SalesLogix Server and Web Client Vendor: Sage Homepage: http://www.saleslogix.com Platforms: Microsoft Windows Impact: Bypass authentication Privilege escalation SQL injection Information leaks Arbitrary file creation Directory...

[SA12973] OpenSSL "der_chop" Script Insecure Temporary File Creation

TITLE: OpenSSL "derchop" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA12973 VERIFY ADVISORY: http://secunia.com/advisories/12973/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: OpenSSL 0.9.x http://secunia.com/product/253/ DESCRIPTION: A...

ghostscript -- insecure temporary file creation vulnerability

Ghostscript is affected by an insecure temporary file creation vulnerability. This issue is likely due to a design error that causes the application to fail to verify the existence of a file before writing to it. An attacker may leverage this issue to overwrite arbitrary files with the privileges...

CVE-2004-1610

SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticated users to create arbitrary files and execute code via the 1 vMME.AttachmentPath or 2 vMME.LibraryPath variables...

SLX Server 6.1 Arbitrary File Creation Exploit (PoC)

No description provided by source. !/usr/bin/perl Proof of concept exploit: Arbitrary file creation for SLX server 6.1 Written by Carl Livitt, Agenda Security Services, June 2004. This exploit abuses the ProcessQueueFile command on SLX 6.1 others? servers to create arbitrary files on the filesyst...

SLX Server 6.1 - Arbitrary File Creation

!/usr/bin/perl Proof of concept exploit: Arbitrary file creation for SLX server 6.1 Written by Carl Livitt, Agenda Security Services, June 2004. This exploit abuses the ProcessQueueFile command on SLX 6.1 others? servers to create arbitrary files on the filesystem of the SLX server. By using...