thttpd symbolic links problem

Insecure temporary file creation on logfiles rotation...

Debian DSA-968-1 : noweb - insecure temporary file

Javier Fernandez-Sanguino Pena from the Debian Security Audit project discovered that a script in noweb, a web like literate-programming tool, creates a temporary file in an insecure fashion. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plug...

CentOS 3 : net-snmp (CESA-2005:373)

Updated net-snmp packages that fix two security issues and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. SNMP Simple Network Management Protocol is a protocol used for network management. A denial of service bug was...

GLSA-200604-13 : fbida: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200604-13 fbida: Insecure temporary file creation Jan Braun has discovered that the 'fbgs' script provided by fbida insecurely creates temporary files in the '/var/tmp' directory. Impact : A local attacker could create links in th...

[SECURITY] [DSA 1013-1] New snmptrapfmt packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 1013-1 [email protected] http://www.debian.org/security/ Martin Schulze March 22nd, 2006 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 1013-1] New snmptrapfmt packages fix insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1013-1 [email protected] http://www.debian.org/security/ Martin Schulze March 22nd, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 960-3] New libmail-audit-perl packages fix insecure temporary file use

-------------------------------------------------------------------------- Debian Security Advisory DSA 960-3 [email protected] http://www.debian.org/security/ Martin Schulze March 20th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 960-3] New libmail-audit-perl packages fix insecure temporary file use

-------------------------------------------------------------------------- Debian Security Advisory DSA 960-3 [email protected] http://www.debian.org/security/ Martin Schulze March 20th, 2006 http://www.debian.org/security/faq -...

GLSA-200602-14 : noweb: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200602-14 noweb: Insecure temporary file creation Javier Fernandez-Sanguino has discovered that the lib/toascii.nw and shell/roff.mm scripts insecurely create temporary files with predictable filenames. Impact : A local attacker...

[Full-disclosure] [SECURITY] [DSA 968-1] New noweb packages fix insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 968-1 [email protected] http://www.debian.org/security/ Martin Schulze February 13th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 960-2] New libmail-audit-perl packages fix insecure temporary file use

-------------------------------------------------------------------------- Debian Security Advisory DSA 960-2 [email protected] http://www.debian.org/security/ Martin Schulze January 31st, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 945-1] New antiword packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 945-1 [email protected] http://www.debian.org/security/ Martin Schulze January 17th, 2006 http://www.debian.org/security/faq -...

DSA-945-1 antiword - insecure temporary file

Bulletin has no description...

[SECURITY] [DSA 941-1] New tuxpaint packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 941-1 [email protected] http://www.debian.org/security/ Martin Schulze January 16th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 941-1] New tuxpaint packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 941-1 [email protected] http://www.debian.org/security/ Martin Schulze January 16th, 2006 http://www.debian.org/security/faq -...

Ubuntu 4.10 : vim vulnerabilities (USN-61-1)

Javier Fernandez-Sanguino Pena noticed that the auxillary scripts 'tcltags' and 'vimspell.sh' created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the script either by calling it...

Mandrake Linux Security Advisory : graphviz (MDKSA-2005:188)

Javier Fernndez-Sanguino Pea discovered insecure temporary file creation in graphviz, a rich set of graph drawing tools, that can be exploited to overwrite arbitrary files by a local attacker. The updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable Network...

[Full-disclosure] MDKSA-2006:001 - Updated tkcvs packages fix insecure temporary file vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:001 http://www.mandriva.com/security/ Package : tkcvs Date : January 3, 2006 Affected: 10.2, 2006.0 Problem Description: Javier Fernandez-Sanguino Pena discovered that tkdiff created temporary files in an...

[SECURITY] [DSA 927-2] New tkdiff packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 927-2 [email protected] http://www.debian.org/security/ Martin Schulze December 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 928-1] New dhis-tools-dns packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 928-1 [email protected] http://www.debian.org/security/ Martin Schulze December 27th, 2005 http://www.debian.org/security/faq -...