461 matches found
[SECURITY] [DSA-338-1] New x-face-el packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 338-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 6th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA-337-1] New semi, wemi packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 337-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 6th, 2003 http://www.debian.org/security/faq -...
DSA-292-3 mime-support - insecure temporary file creation
Bulletin has no description...
[SECURITY] [DSA 286-1] New gs-common packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 286-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 286-1] New gs-common packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 286-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 286-1] New gs-common packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 286-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 285-1] New lprng packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 285-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 285-1] New lprng packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 285-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2003 http://www.debian.org/security/faq -...
DSA-286 gs-common - insecure temporary file
Bulletin has no description...
DSA-285 lprng - insecure temporary file
Bulletin has no description...
[SECURITY] [DSA 256-1] New mhc-utils packages fix predictable temporary file
-------------------------------------------------------------------------- Debian Security Advisory DSA 256-1 [email protected] http://www.debian.org/security/ Martin Schulze February 28th, 2003 http://www.debian.org/security/faq -...
DSA-159 python - insecure temporary files
Bulletin has no description...
CVE-2001-1146
AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 is affected. The issue stems from creating temporary files with predictable names, enabling local users to perform a symlink attack to modify files. The description in the Connected documents confirms the root cause as predictable t...
CVE-2001-0481
Mandrake Linux 8.0 is affected by a vulnerability in rpmdrake related to insecure temporary file handling (CVE-2001-0481). The connected Nessus advisory MDKSA-2001:043 confirms a temporary-file vulnerability in rpmdrake and provides an updated rpmdrake package to fix it. The NVD entry mirrors the...
LPRng 3.6.x - Failure To Drop Supplementary Groups
LPRng 3.6.x - Failure To Drop Supplementary Groups / source: https://www.securityfocus.com/bid/2865/info The LPRng software is an enhanced, extended, and portable implementation of the Berkeley LPR print spooler functionality. When the LPRng daemon is initialized, it fails to drop its supplementa...
FreeBSD-SA-00:01.make
-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-00:01 Security Advisory FreeBSD, Inc. Topic: Insecure temporary file handling in make1 Category: core Module: make Announced: 2000-01-19 Affects: All versions before the...
IBM AIX eNetwork Firewall 3.23.3 - Insecure Temporary File Creation
IBM AIX eNetwork Firewall 3.23.3 - Insecure Temporary File Creation soure: https://www.securityfocus.com/bid/287/info IBM's eNetwork Firewall for AIX contains a number of vulnerability in scripts which manipulate files insecurely. When fwlsuser script is run it creates a temporary file called...
IBM AIX eNetwork Firewall 3.2/3.3 - Insecure Temporary File Creation
soure: https://www.securityfocus.com/bid/287/info IBM's eNetwork Firewall for AIX contains a number of vulnerability in scripts which manipulate files insecurely. When fwlsuser script is run it creates a temporary file called /tmp/fwlsuser.PID where PID is the process ID of the command being run...
IBM AIX 4.2.1 - 'snap' Insecure Temporary File Creation
source: https://www.securityfocus.com/bid/375/info The snap command is a diagnostic utlitiy for gathering system information on AIX platforms. It can only be executed by root, but it copies various system files into /tmp/ibmsupt/ under /tmp/ibmsupt/general/ you will find the passwd file with...
Slackware Linux 3.4 - netconfig Temporary File
Slackware Linux 3.4 - netconfig Temporary File source: https://www.securityfocus.com/bid/81/info netconfig creates the file /tmp/tmpmsg insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/tmpmsg to any file and wait for root to run the program. This will clober...