PT-2014-5650

Name of the Vulnerable Software and Affected Versions IBM AIX versions 6.1 and 7.1 VIOS versions 2.2.x Description The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file. This is due to an incomplete fix for a previous issue. Recommendations For IBM AIX...

PT-2014-5653

Name of the Vulnerable Software and Affected Versions Lynis version 1.5.4 and earlier Description The issue allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis. file in the include/tests webservers component of Lynis. Recommendations For versions prior to 1.5.5,...

PT-2014-5656

Name of the Vulnerable Software and Affected Versions Lynis versions prior to 1.5.5 Description The issue allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis..unsorted file with an easily determined name. Recommendations For versions prior to 1.5.5, update to...

CVE-2014-0177

The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file...

CVE-2014-3423

lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic. temporary file...

CVE-2014-3424

lisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/tramp. temporary file...

CVE-2014-3421

lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file...

CVE-2014-3422

lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/...

CVE-2014-3421: Improper Link Resolution Before File Access

lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file...

PT-2014-5311

Name of the Vulnerable Software and Affected Versions GNU Emacs versions 24.3 and earlier Description The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file in /tmp/tramp.. Recommendations For GNU Emacs versions 24.3 and earlier, consider updating to a...

PT-2014-5310

Name of the Vulnerable Software and Affected Versions GNU Emacs versions 24.3 and earlier Description The issue allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic temporary file. Recommendations For GNU Emacs versions 24.3 and earlier, consider updating to a...

PT-2014-5308

Name of the Vulnerable Software and Affected Versions GNU Emacs versions 24.3 and earlier Description The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file. This is related to the lisp/gnus/gnus-fun.el component. Recommendations Fo...

PT-2014-5309

Name of the Vulnerable Software and Affected Versions GNU Emacs versions prior to 24.4 Description The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/. Recommendations For GNU Emacs versions prior to 24.4, update to version 24.4 or...

PT-2014-2455

Name of the Vulnerable Software and Affected Versions pktstat version 1.8.5 Description The issue allows local users to overwrite arbitrary files via a symlink attack on /tmp/smtp.log. This is due to a problem in tmp smtp.c. Recommendations For pktstat version 1.8.5, consider restricting access t...

CVE-2010-5105: Improper Link Resolution Before File Access

The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103...

CVE-2014-2893

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names...

PT-2014-4950

Name of the Vulnerable Software and Affected Versions Clang versions 3.5 and earlier Description The issue allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names. This is due to a problem in the...

CVE-2013-4116

lib/npm.js in Node Packaged Modules npm before 1.3.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names that are created when unpacking archives...

CVE-2013-4472

The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names...

CVE-2013-4116: Improper Link Resolution Before File Access

lib/npm.js in Node Packaged Modules npm before 1.3.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names that are created when unpacking archives...