CVE-2008-4943

bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/error.txt, b /tmp/errores.txt, and possibly other temporary files, related to the 1 creabulmafact, 2 creabulmacont, and possibly 3 actualizabulmacont, 4 installbulmages-db, and 5...

CVE-2008-4942

CVE-2008-4942 affects audiolink 0.05. A local symlink attack could cause overwriting of arbitrary files via temporary files /tmp/audiolink.db.tmp and /tmp/audiolink.tb.tmp. The connected documents confirm the vulnerable component and the attack surface; exploitation details and remediation are no...

CVE-2008-4938

CVE-2008-4938 affects aegis 4.24 and aegis-web 4.24. Local users can overwrite arbitrary files via a symlink attack on temporary files (examples: /tmp/#####, /tmp/#####.intro, /tmp/aegis.#####.ae, /tmp/aegis.#####.log, /tmp/aegis.#####.out, etc.) related to scripts (bng_dvlpd.sh, bng_rvwd.sh, awt...

CVE-2008-4108

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

CVE-2008-0806

The CVE-2008-0806 issue affects wyrd 1.4.3b, where a local user can exploit a symlink race to overwrite the wyrd-tmp.[USERID] temporary file. Fedora advisories (FEDORA-2008-1986 and FEDORA-2008-1963) and Red Hat entries confirm this vulnerability in wyrd 1.4.3b, describing an insecure temporary f...

CVE-2007-4129

CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory...

DEBIAN-CVE-2007-4129

CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory...

jetAudio 7.x - .m3u Local Overwrite (SEH)

jetAudio 7.x - .m3u Local Overwrite SEH !/usr/bin/python jetAudio 7.x m3u File 0day Local SEH Overwrite Exploit Bug discovered by Krystian Kloskowski h07 Tested on: jetAudio 7.0.3 Basic / 2k SP4 Polish Shellcode: Windows Execute Command calc Just for fun ; from struct import pack m3u =...

jetAudio 7.x - '.m3u' Local Overwrite (SEH)

!/usr/bin/python jetAudio 7.x m3u File 0day Local SEH Overwrite Exploit Bug discovered by Krystian Kloskowski h07 Tested on: jetAudio 7.0.3 Basic / 2k SP4 Polish Shellcode: Windows Execute Command calc Just for fun ; from struct import pack m3u = "EXTM3U\nhttp://%s" shellcode =...

CVE-2007-0237

The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2007-0336: Undefined Security Weakness

Undercover.app/Contents/Resources/uc in Rixstep Undercover allows local users to overwrite arbitrary files, probably related to a race condition...

CVE-2006-3813: Undefined Security Weakness

A regression error in the Perl package for Red Hat Enterprise Linux 4 omits the patch for CVE-2005-0155, which allows local users to overwrite arbitrary files with debugging information...

security flaw

A regression error in the Perl package for Red Hat Enterprise Linux 4 omits the patch for CVE-2005-0155, which allows local users to overwrite arbitrary files with debugging information...

Design/Logic Flaw

A cron job in fcheck before 2.7.59 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2005-3115

mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via 1 ts.stat, 2 ts.mpg, 3 foobar, 4 blockbar, or 5 foobarNNN...

CVE-2005-3011: Improper Link Resolution Before File Access

The sortoffline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2004-2388

rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user...

CVE-2002-1791: Undefined Security Weakness

SGI IRIX 6.5 through 6.5.17 creates temporary desktop files with world-writable permissions, which allows local users to overwrite or corrupt those files...

CVE-2003-1139

Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file...

CVE-2005-0225: Undefined Security Weakness

firehol.sh in FireHOL before 1.224 creates temporary files with predictable file names, which could allow local users to overwrite arbitrary files via a symlink attack...