Samsung ml85p Printer Driver 1.0 - Insecure Temporary File Creation (2)

source: https://www.securityfocus.com/bid/3008/info ml85p is a Linux driver for Samsung ML-85G series printers. It may be bundled with distributions of Ghostscript. ml85p does not check for symbolic links when creating image output files. These files are created in /tmp with a guessable naming...

Samsung ml85p Printer Driver 1.0 - Insecure Temporary File Creation (1)

Samsung ml85p Printer Driver 1.0 - Insecure Temporary File Creation 1 // source: https://www.securityfocus.com/bid/3008/info ml85p is a Linux driver for Samsung ML-85G series printers. It may be bundled with distributions of Ghostscript. ml85p does not check for symbolic links when creating image...

lmail local root exploit

lmail is vulnerable to an insecure mktemp race which allows a user to overwrite or create a files. Offending code lmail.c: define MAILTMPFILE "/tmp/rmXXXXXX" ... static char tempfname = MAILTMPFILE; ... if fseekstdin, 0L, 0 != 0 mailfile = fopenmktemptempfname, "w+"; ... Patch: s/mktemp/mkstemp/g...

Various shells create temporary files insecurely when using << operator

Overview sh uses /tmp files of a predictable name in creating files for input redirection using the operator. Description When performing the "" redirection, /bin/sh creates a temporary file in /tmp with a name based on the process id, writes subsequent input out to that file, and then closes the...

[SECURITY] [DSA-065-1] samba remote file append/creation problem

Package : samba Problem type : remote file append/creation Debian-specific: no Michal Zalewski discovered that samba does not properly validate NetBIOS names from remote machines. By itself that is not a problem, except if Samba is configure to write log-files to a file that includes the NetBIOS...

Samba 2.0.x2.2 - Arbitrary File Creation

Samba 2.0.x2.2 - Arbitrary File Creation source: https://www.securityfocus.com/bid/2928/info Samba is a freely available file and printer sharing application maintained and developed by the Samba Development Team. Samba allows file and printer sharing between operating systems on the Unix and...

Samba 2.0.x/2.2 - Arbitrary File Creation

source: https://www.securityfocus.com/bid/2928/info Samba is a freely available file and printer sharing application maintained and developed by the Samba Development Team. Samba allows file and printer sharing between operating systems on the Unix and Microsoft platforms. A remote local user can...

CVE-2001-0265

ASCII Armor parser in Windows PGP 7.0.3 and earlier allows attackers to create files in arbitrary locations via a malformed ASCII armored file...

CVE-2001-0403

/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI...

CVE-2001-0403: Undefined Security Weakness

/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI...

CVE-2001-0109: Undefined Security Weakness

rctab in SuSE 7.0 and earlier allows local users to create or overwrite arbitrary files via a symlink attack on the rctmp temporary file...

CVE-2001-0222: Undefined Security Weakness

webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack...

VMware symlink problems

Problem description ---------------------- There is symlink vulnerability in the vmware-mount.pl script which comes with lates VMware. 2. Details ---------- While mounting virtual disk drives using the vmware-mount.pl script, a temporary file named vmware-mount.pl.PID where PID is the current...

SuSE 7.0 - KFM Insecure .TMP File Creation

SuSE 7.0 - KFM Insecure .TMP File Creation source: https://www.securityfocus.com/bid/2629/info KFM is the KDE File Manager, included with version 1 of the KDE base package in most Linux installations. KFM is designed as a graphical, easily navigated interface to the Linux Filesystem. A problem wi...

SuSE 7.0 - KFM Insecure '.TMP' File Creation

source: https://www.securityfocus.com/bid/2629/info KFM is the KDE File Manager, included with version 1 of the KDE base package in most Linux installations. KFM is designed as a graphical, easily navigated interface to the Linux Filesystem. A problem with KFM could allow the overwriting of files...

Проблемы в exuberant-ctags &#40;symbolic link&#41;

Проблема символьных линков при создании временных файлов...

Siemens Reliant UNIX 5.4 - ppd -T Race Condition

Siemens Reliant UNIX 5.4 - ppd -T Race Condition source: https://www.securityfocus.com/bid/2606/info Reliant Unix is a variant of the UNIX Operating System distributed by Fujitsu-Siemens. Reliant Unix is a scalable UNIX Operating system designed for use on Siemens servers. A problem in the...

PGP 5.x/6.x/7.0 - ASCII Armor Parser Arbitrary File Creation

source: https://www.securityfocus.com/bid/2556/info ASCII Armor is a text based encoding format used by PGP Pretty Good Privacy. While it is possible to encode any file using ASCII Armor, it is used by PGP to encode signature files and public keys to facilitate transmission in e-mail messages. Wh...

PGP 5.x6.x7.0 - ASCII Armor Parser Arbitrary File Creation

PGP 5.x6.x7.0 - ASCII Armor Parser Arbitrary File Creation source: https://www.securityfocus.com/bid/2556/info ASCII Armor is a text based encoding format used by PGP Pretty Good Privacy. While it is possible to encode any file using ASCII Armor, it is used by PGP to encode signature files and...

[ Hackerslab bug_paper ] SunOS application perfmon vulnerability

============================================================================== Hackerslab bugpaper SunOS application perfmon vulnerability ============================================================================== File : /opt/JSParm/bin/perfmon SYSTEM : Solaris 2.X INFO : parm is a program th...