1428 matches found
GLSA-200409-08 : Ruby: CGI::Session creates files insecurely
The remote host is affected by the vulnerability described in GLSA-200409-08 Ruby: CGI::Session creates files insecurely The CGI::Session::FileStore implementation and presumably CGI::Session::PStore, which allow data associated with a particular Session instance to be written to a file, writes t...
GLSA-200408-13 : kdebase, kdelibs: Multiple security issues
The remote host is affected by the vulnerability described in GLSA-200408-13 kdebase, kdelibs: Multiple security issues KDE contains three security issues: Insecure handling of temporary files when running KDE applications outside of the KDE environment DCOPServer creates temporary files in an...
GLSA-200407-07 : Shorewall : Insecure temp file handling
The remote host is affected by the vulnerability described in GLSA-200407-07 Shorewall : Insecure temp file handling Shorewall uses temporary files and directories in an insecure manner. A local user could create symbolic links at specific locations, eventually overwriting other files on the...
[SECURITY] [DSA 540-1] New mysql packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 540-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 540-1] New mysql packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 540-1 [email protected] http://www.debian.org/security/ Martin Schulze August 18th, 2004 http://www.debian.org/security/faq -...
CVE-2004-0231
Multiple vulnerabilities in Midnight Commander mc before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."...
CVE-2004-0231
Multiple vulnerabilities in Midnight Commander mc before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."...
CVE-2004-0231
Multiple vulnerabilities in Midnight Commander mc before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."...
DSA-540 mysql-dfsg - insecure file creation
Bulletin has no description...
mysql -- mysqlhotcopy insecure temporary file creation
According to Christian Hammers: mysqlhotcopy created temporary files in /tmp which had predictable filenames and such could be used for a tempfile run attack. Jeroen van Wolffelaar is credited with discovering the issue...
FreeBSD : Ruby insecure file permissions in the CGI session management (e811aaf1-f015-11d8-876f-00902714cc7c)
According to a Debian Security Advisory : Andres Salomon noticed a problem in the CGI session management of Ruby, an object-oriented scripting language. CGI::Session's FileStore and presumably PStore ... implementations store session information insecurely. They simply create files, ignoring...
Ruby insecure file permissions in the CGI session management
According to a Debian Security Advisory: Andres Salomon noticed a problem in the CGI session management of Ruby, an object-oriented scripting language. CGI::Session's FileStore and presumably PStore ... implementations store session information insecurely. They simply create files, ignoring...
DSA-537 ruby - insecure file permissions
Bulletin has no description...
[ GLSA 200407-07 ] Shorewall : Insecure temp file handling
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200407-07 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...
Sun Java Virtual Machine 1.x - Font.createFont Method Insecure Temporary File Creation
Sun Java Virtual Machine 1.x - Font.createFont Method Insecure Temporary File Creation source: https://www.securityfocus.com/bid/10685/info Sun Java Virtual Machine is a component of the Sun Java infrastructure that performs the handling of Java applets and other programs. It is available for Uni...
Esearch: Insecure temp file handling
Background Esearch is a replacement for the Portage command "emerge search". It uses an index to speed up searching of the Portage tree. Description The eupdatedb utility uses a temporary file /tmp/esearchdb.py.tmp to indicate that the eupdatedb process is running. When run, eupdatedb checks to s...
CVE-2004-0231
Multiple vulnerabilities in Midnight Commander mc before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."...
[SECURITY] [DSA 497-1] New mc packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 497-1 [email protected] http://www.debian.org/security/ Martin Schulze April 29th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 497-1] New mc packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 497-1 [email protected] http://www.debian.org/security/ Martin Schulze April 29th, 2004 http://www.debian.org/security/faq -...