[SECURITY] [DSA 839-1] New apachetop packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 839-1 [email protected] http://www.debian.org/security/ Martin Schulze October 4th, 2005 http://www.debian.org/security/faq -...

cfengine -- arbitrary file overwriting vulnerability

A Debian Security Advisory reports: Javier Fernández-Sanguino Peña discovered several insecure temporary file uses in cfengine, a tool for configuring and maintaining networked machines, that can be exploited by a symlink attack to overwrite arbitrary files owned by the user executing cfengine,...

[SECURITY] [DSA 822-1] New gtkdiskfree packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 822-1 [email protected] http://www.debian.org/security/ Martin Schulze September 29th, 2005 http://www.debian.org/security/faq -...

RHEL 4 : cvs (RHSA-2005:756)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2005:756 advisory. CVS Concurrent Version System is a version control system. An insecure temporary file usage was found in the cvsbug program. It is possible that a loc...

Low: Red Hat Security Advisory: cvs security update

An updated cvs package that fixes a security bug is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. CVS Concurrent Version System is a version control system. An insecure temporary file usage was found in the cvsbug program. It is...

GLSA-200508-19 : lm_sensors: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200508-19 lmsensors: Insecure temporary file creation Javier Fernandez-Sanguino Pena has discovered that lmsensors insecurely creates temporary files with predictable filenames when saving configurations. Impact : A local attacker...

[SECURITY] [DSA 783-1] New mysql packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 783-1 [email protected] http://www.debian.org/security/ Martin Schulze August 24th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 761-2] New heartbeat packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 761-2 [email protected] http://www.debian.org/security/ Martin Schulze August 15th, 2005 http://www.debian.org/security/faq -...

Debian DSA-760-1 : ekg - several vulnerabilities

Several vulnerabilities have been discovered in ekg, a console Gadu Gadu client, an instant messaging program. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CAN-2005-1850 Marcin Owsiany and Wojtek Kaniewski discovered insecure temporary file creatio...

[SECURITY] [DSA 760-1] New ekg packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 760-1 [email protected] http://www.debian.org/security/ Martin Schulze July 18th, 2005 http://www.debian.org/security/faq -...

Skype Technologies Skype 0.921.01.1 - Insecure Temporary File Creation

Skype Technologies Skype 0.921.01.1 - Insecure Temporary File Creation source: https://www.securityfocus.com/bid/14293/info Skype is affected by an insecure temporary file creation vulnerability. Exploitation would most likely result in loss of data or a denial of service if critical files are...

FreeBSD : mysql-server -- multiple remote vulnerabilities (619ef337-949a-11d9-b813-00d05964249f)

SecurityFocus reports : MySQL is reported prone to an insecure temporary file creation vulnerability. Reports indicate that an attacker that has 'CREATE TEMPORARY TABLE' privileges on an affected installation may leverage this vulnerability to corrupt files with the privileges of the MySQL proces...

FreeBSD : wine -- information disclosure due to insecure temporary file handling (48a59c96-9c6e-11d9-a040-000a95bc6fae)

Due to insecure temporary file creation in the Wine Windows emulator, it is possible for any user to read potentially sensitive information from temporary registry files. When a Win32 application is launched by wine, wine makes a dump of the Windows registry in /tmp with name regxxxxyyyy.tmp ,...

CVE-2005-2230

Electronic Mail Operator elmo 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite arbitrary files...

[SA16040] xpvm "xpvm.tcl" Insecure Temporary File Creation

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[Full-disclosure] GIPTables Firewall <= v1.1 insecure temporary file creation

GIPTables Firewall insecure temporary file creation Vendor: http://www.giptables.org/ Advisory: http://www.zataz.net/adviso/giptables-05222005.txt Vendor informed: yes Exploit available: yes Impact : medium Exploitation : low The vulnerability is caused due to temporary file being created...

Fedora Core 2 : kdelibs-3.2.2-14.FC2 (2005-244)

Wed Mar 2 2005 Than Ngo 6:3.2.2-14.FC2 - Applied patch to fix DCOP DoS, CVE-2005-0396, 150090 thanks KDE security team - Wed Feb 16 2005 Than Ngo 3.2.2-13.FC2 - Applied patch to fix dcopidlng insecure temporary file usage, CVE-2005-0365, 148823 Note that Tenable Network Security has extracted the...

ZH2005-02SA.txt

ZH2005-02SA Insecure tmp file creation in Wine 03/13/2005 Title: Insecure tmp file creation in Wine Author: Giovanni Delvecchio e-mail: [email protected] Version affected : Wine 20050211 and previous releases About Wine ======== from http://www.winehq.org/site/docs/wine-faq/index : Wine is a...

[Full-disclosure] [ZH2005-02SA] Insecure tmp file creation in Wine

Title: Insecure tmp file creation in Wine Author: Giovanni Delvecchio e-mail: [email protected] Version affected : Wine 20050211 and previous releases About Wine ======= from http://www.winehq.org/site/docs/wine-faq/index : Wine is a program which allows the operation of DOS and MS Windows...

wine -- information disclosure due to insecure temporary file handling

Due to insecure temporary file creation in the Wine Windows emulator, it is possible for any user to read potentially sensitive information from temporary registry files. When a Win32 application is launched by wine, wine makes a dump of the Windows registry in /tmp with name regxxxxyyyy.tmp ,...