1396 matches found
Ruby insecure file permissions in the CGI session management
According to a Debian Security Advisory: Andres Salomon noticed a problem in the CGI session management of Ruby, an object-oriented scripting language. CGI::Session's FileStore and presumably PStore ... implementations store session information insecurely. They simply create files, ignoring...
[ GLSA 200407-07 ] Shorewall : Insecure temp file handling
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200407-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...
Sun Java Virtual Machine 1.x - Font.createFont Method Insecure Temporary File Creation
Sun Java Virtual Machine 1.x - Font.createFont Method Insecure Temporary File Creation source: https://www.securityfocus.com/bid/10685/info Sun Java Virtual Machine is a component of the Sun Java infrastructure that performs the handling of Java applets and other programs. It is available for Uni...
Esearch: Insecure temp file handling
Background Esearch is a replacement for the Portage command "emerge search". It uses an index to speed up searching of the Portage tree. Description The eupdatedb utility uses a temporary file /tmp/esearchdb.py.tmp to indicate that the eupdatedb process is running. When run, eupdatedb checks to s...
CVE-2004-0231
Multiple vulnerabilities in Midnight Commander mc before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."...
[SECURITY] [DSA 497-1] New mc packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 497-1 [email protected] http://www.debian.org/security/ Martin Schulze April 29th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 497-1] New mc packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 497-1 [email protected] http://www.debian.org/security/ Martin Schulze April 29th, 2004 http://www.debian.org/security/faq -...
DSA-497 mc - several vulnerabilities
Bulletin has no description...
Midnight Commander buffer overflows, format string bugs, and insecure temporary file handling
Jakub Jelinek reports several security related bugs in Midnight Commander, including: Multiple buffer overflows CVE-2004-0226 Insecure temporary file handling CVE-2004-0231 Format string bug CVE-2004-0232...
[SECURITY] [DSA 483-1] New mysql packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 483-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 477-1] New xine-ui packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 477-1 [email protected] http://www.debian.org/security/ Martin Schulze April 6th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 477-1] New xine-ui packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 477-1 [email protected] http://www.debian.org/security/ Martin Schulze April 6th, 2004 http://www.debian.org/security/faq -...
[OpenPKG-SA-2004.006] OpenPKG Security Advisory (uudeview)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security.html http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2004.006 12-Mar-2004 Package: uudeview Vulnerability: insecure temp file handling,...
[SECURITY] [DSA 460-1] New sysstat packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 460-1 [email protected] http://www.debian.org/security/ Matt Zimmerman March 10th, 2004 http://www.debian.org/security/faq -...
XBoard < 4.2.7: pxboard insecure tmp file handling
About XBoard: XBoard is a graphical chessboard that can serve as a user interface to chess engines such as GNU Chess, the Internet Chess Servers, electronic mail correspondence chess, or your own collection of saved games. pxboard is a script that saves its standard input to a temporary file and...
Mac OS X Systemic Insecure File Permissions
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Systemic Insecure File Permissions Release Date: 10/28/2003 Application: Finder Many Platform: Mac OS X 10.2.8 and below Severity: High Author: Dave G. [email protected] Vendor Status: Vend...
Musicqueue 1.2 - SIGSEGV Signal Handler Insecure File Creation
Musicqueue 1.2 - SIGSEGV Signal Handler Insecure File Creation // source: https://www.securityfocus.com/bid/8899/info A vulnerability has been reported for Musicqueue. The problem specifically occurs within a signal handling procedure used invoked when a segmentation violation occurs. The procedu...
Musicqueue 1.2 - SIGSEGV Signal Handler Insecure File Creation
// source: https://www.securityfocus.com/bid/8899/info A vulnerability has been reported for Musicqueue. The problem specifically occurs within a signal handling procedure used invoked when a segmentation violation occurs. The procedure invokes a library function, passing it the name of a...
OpenServer 5.0.5 : Insecure creation of files in /tmp
To: [email protected] [email protected] [email protected] etsys.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: OpenServer 5.0.5 : Insecure creation of files in /tmp Advisory number: CSSA-2003-SCO.27 Issue date: 2003 October 20 Cross...