bash: Insecure temporary file use in aliasconv.sh, aliasconv.bash, cshtobash (symlink attack)

bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb.? temporary file, related to the 1 aliasconv.sh, 2 aliasconv.bash, and 3 cshtobash scripts...

Debian DSA-2147-1 : pimd - insecure temporary files

Vincent Bernat discovered that pimd, a multicast routing daemon, creates files with predictable names upon the receipt of particular signals. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory...

Altair Engineering PBS Pro 10.x - pbs_mom Insecure Temporary File Creation

Altair Engineering PBS Pro 10.x - pbsmom Insecure Temporary File Creation source: https://www.securityfocus.com/bid/41449/info Altair Engineering PBS Pro creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to perform symbolic-link...

Altair Engineering PBS Pro 10.x - 'pbs_mom' Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/41449/info Altair Engineering PBS Pro creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected applicatio...

LMBench: Insecure temporary file usage

Background LMBench is a suite of simple, portable benchmarks for UNIX platforms. Description Dmitry E. Oboukhov reported that the rccs and STUFF scripts do not handle "/tmp/sdiff." temporary files securely. NOTE: There might be further occurances of insecure temporary file usage. Impact A local...

PHP Fuzzer Framework - Default Location Insecure Temporary File Creation

PHP Fuzzer Framework - Default Location Insecure Temporary File Creation // source: https://www.securityfocus.com/bid/35924/info PHP Fuzzer Framework creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to overwrite and execute arbitrar...

PHP Fuzzer Framework - Default Location Insecure Temporary File Creation

// source: https://www.securityfocus.com/bid/35924/info PHP Fuzzer Framework creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to overwrite and execute arbitrary code with the privileges of the victim user. Successfully exploiting th...

DEBIAN-CVE-2009-2461

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors...

Ubuntu 8.04 LTS : openoffice.org-l10n update (USN-677-2)

USN-677-1 fixed vulnerabilities in OpenOffice.org. The changes required that openoffice.org-l10n also be updated for the new version in Ubuntu 8.04 LTS. Multiple memory overflow flaws were discovered in OpenOffice.org's handling of WMF and EMF files. If a user were tricked into opening a speciall...

Mandriva Update for xen MDKSA-2007:203 (xen)

Check for the Version of xen OpenVAS Vulnerability Test Mandriva Update for xen MDKSA-2007:203 xen Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for xen MDKSA-2007:203 (xen)

Check for the Version of xen OpenVAS Vulnerability Test Mandriva Update for xen MDKSA-2007:203 xen Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Debian DSA-1760-1 : openswan - denial of service

Two vulnerabilities have been discovered in openswan, an IPSec implementation for linux. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-4190 Dmitry E. Oboukhov discovered that the livetest tool is using temporary files insecurely, which could lead ...

Mandrake Security Advisory MDVSA-2009:070 (openoffice.org)

The remote host is missing an update to openoffice.org announced via advisory MDVSA-2009:070. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Sun xVM VirtualBox Insecure Temporary Files Vulnerability (Linux)

This host is installed with Sun xVM VirtualBox and is prone to Insecure Temporary Files vulnerability. OpenVAS Vulnerability Test $Id: secpodvirtualboxacquiredaemonlockvulnlin900408.nasl 7823 2017-11-20 08:54:04Z cfischer $ Description: Sun xVM VirtualBox Insecure Temporary Files Vulnerability...

Sun xVM VirtualBox Insecure Temporary Files Vulnerability (Windows)

This host is installed with Sun xVM VirtualBox and is prone to Insecure Temporary Files vulnerability. OpenVAS Vulnerability Test $Id: secpodvirtualboxacquiredaemonlockvulnwin900407.nasl 7293 2017-09-27 08:49:48Z cfischer $ Description: Sun xVM VirtualBox Insecure Temporary Files Vulnerability...

Sun xVM VirtualBox < 2.0.6 Insecure Temporary Files Vulnerability - Windows

Sun xVM VirtualBox is prone to an SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.900407";...

FreeBSD : mgetty+sendfax -- symlink attack via insecure temporary files (44ee8160-c453-11dd-a721-0030843d3802)

Debian reports : Faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp. temporary file. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML databa...

flamethrower symbolic links vulnerability

Insecure temporary files creation...

[SECURITY] [DSA 1657-1] New qemu packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1657-1 [email protected] http://www.debian.org/security/ Steve Kemp October 20, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1648-1] New mon packages fix insecure temporary files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1648-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 08, 2008 http://www.debian.org/security/faq -...