[Full-disclosure] [ZH2005-16SA] Insecure temporary file creation in Skype for Linux

ZH2005-16SA Insecure temporary file creation in Skype for Linux Application: Skype for Linux Version affected: = 1.1.0.20 Vendor website : http://www.skype.com Author: Giovanni Delvecchio e-mail: [email protected] About Skype ======== Skype is a free program that uses the latest P2P technolog...

FreeBSD : sharutils -- unshar insecure temporary file creation (5f003a08-ba3c-11d9-837d-000e0c2e438a)

An Ubuntu Advisory reports : Joey Hess discovered that 'unshar' created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the program. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

FreeBSD : a2ps -- insecure temporary file creation (9168253c-5a6d-11d9-a9e7-0001020eed82)

A Secunia Security Advisory reports that Javier Fernandez-Sanguino Pena has found temporary file creation vulnerabilities in the fixps and psmandup scripts which are part of a2ps. These vulnerabilities could lead to an attacker overwriting arbitrary files with the credentials of the user running...

FreeBSD : kdelibs -- insecure temporary file creation (29dd0065-81fa-11d9-a9e7-0001020eed82)

Davide Madrisan reports : The dcopidlng' script in the KDE library package kdelibs-3.3.2/dcop/dcopidlng/dcopidlng creates temporary files in a unsecure manner. Note: dcopidlng is only used at build time, so only users installing KDE are vulnerable, not users already running KDE. %NASLMINLEVEL 703...

Electronic Mail Operator symbolic links problem

statsdump symlink problem during temporary file creation...

FreeBSD : mysql-scripts -- mysqlaccess insecure temporary file creation (ce109fd4-67f3-11d9-a9e7-0001020eed82)

The Debian Security Team reports : Javier Fernandez-Sanguino Pena from the Debian Security Audit Project discovered a temporary file vulnerability in the mysqlaccess script of MySQL that could allow an unprivileged user to let root overwrite arbitrary files via a symlink attack and could also cou...

[SA15989] Backup Manager Unspecified Insecure Temporary File Creation

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

heartbeat -- insecure temporary file creation vulnerability

Eric Romang reports a temporary file creation vulnerability within heartbeat. The vulnerability is caused by hardcoded temporary file usage. This can cause an attacker to create an arbitrary symlink causing the application to overwrite the symlinked file with the permissions of the user executing...

[SA16038] SMS "mpl.sh" Insecure Temporary File Creation

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-1916: Improper Link Resolution Before File Access

linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files...

CVE-2005-0360: Undefined Security Weakness

The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files...

CVE-2005-1759: Undefined Security Weakness

Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack on temporary files after they have been created, a different vulnerability than CVE-2005-1751...

CVE-2002-1716: Undefined Security Weakness

The Host function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using the SaveAs capability...

GLSA-200506-10 : LutelWall: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200506-10 LutelWall: Insecure temporary file creation Eric Romang has discovered that the newversioncheck function in LutelWall insecurely creates a temporary file when updating to a new version. Impact : A local attacker could...

GLSA-200506-08 : GNU shtool, ocaml-mysql: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200506-08 GNU shtool, ocaml-mysql: Insecure temporary file creation Eric Romang has discovered that GNU shtool insecurely creates temporary files with predictable filenames CAN-2005-1751. On closer inspection, Gentoo Security...

xmysqladmin insecure temporary file creation

xmysqladmin insecure temporary file creation Vendor: Gilbert Therrien [email protected] or [email protected] Advisory: http://www.zataz.net/adviso/xmysqladmin-05292005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low xmysqladmin contain a security flaw wich could allow a...

CVE-2005-1874

CVE-2005-1874 describes a directory-traversal vulnerability in the Dzip tool prior to version 2.9, allowing remote attackers to create arbitrary files by supplying a filename containing a “..” in a .dz archive. The issue affects Dzip’s archive extraction logic and could enable arbitrary file writ...

CVE-2005-1874: Undefined Security Weakness

Directory traversal vulnerability in Dzip before 2.9 allows remote attackers to create arbitrary files via a filename containing a .. dot dot in a .dz archive...

[Full-disclosure] GIPTables Firewall <= v1.1 insecure temporary file creation

GIPTables Firewall insecure temporary file creation Vendor: http://www.giptables.org/ Advisory: http://www.zataz.net/adviso/giptables-05222005.txt Vendor informed: yes Exploit available: yes Impact : medium Exploitation : low The vulnerability is caused due to temporary file being created...

firefoxSploit.txt

Firelinking 2 - Proof-of-Concept by mikx var pf = navigator.platform.toLowerCase; if pf.indexOf"win" != -1 var os = "win"; else if pf.indexOf"mac" != -1 var os = "mac"; else var os = "linux" function runDemo // this is an ugly caching workaround document.getElementById'outhtml'.innerHTML = "";...