CVE-2008-5312: Improper Link Resolution Before File Access

mailscanner 4.55.10 and other versions before 4.74.16-1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files used by the 1 f-prot-autoupdate, 2 clamav-autoupdate, 3 panda-autoupdate.new, 4 trend-autoupdate.new, and 5 rav-autoupdate.new scripts in...

CVE-2008-5256: Improper Link Resolution Before File Access

The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file...

CVE-2008-5141: Improper Link Resolution Before File Access

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar. temporary file...

CVE-2008-5142: Improper Link Resolution Before File Access

sendbug in freebsd-sendpr 3.113+5.3 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pr. temporary file...

CVE-2008-5144: Improper Link Resolution Before File Access

nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvidia-cg-toolkit-manifest temporary file...

CVE-2008-5148: Improper Link Resolution Before File Access

sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ temporary file...

CVE-2008-5147: Improper Link Resolution Before File Access

test-pipe-to-pyodconverter.org.sh in docvert 2.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/outer.odt temporary file...

CVE-2008-5152: Improper Link Resolution Before File Access

inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...

CVE-2008-5157: Improper Link Resolution Before File Access

tau 2.16.4 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/makefile.tau.. or 2 /tmp/makefile.tau. temporary file, related to the a taucxx, b tauf90, and c taucc scripts...

CVE-2008-5138: Improper Link Resolution Before File Access

passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd. temporary file...

CVE-2008-5139: Improper Link Resolution Before File Access

updatejail in jailer 0.4 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.updatejail temporary file...

CVE-2008-5136: Improper Link Resolution Before File Access

tkusr in tkusr 0.82 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/tkusr.pgm temporary file...

CVE-2008-5034: Improper Link Resolution Before File Access

master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file. NOTE: the vendor disputes this vulnerability, stating 'this package does not have " possibility of attack with the help of symlinks"'...

CVE-2008-4994: Improper Link Resolution Before File Access

The 1 ncsarmt and 2 ncsawrap scripts in xmcd 2.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.pid temporary file...

CVE-2008-4995: Improper Link Resolution Before File Access

redirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/redirect.log temporary file. NOTE: this vulnerability is only limited to debug mode, which is disabled by default...

CVE-2008-4993: Improper Link Resolution Before File Access

qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file...

CVE-2008-4985

vdrleaktest in Video Disk Recorder aka vdr-dbg or vdr 1.6.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/memleaktest.log temporary file...

CVE-2008-4978

radiance 3R9+20080530 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/opt.fmt, b /tmp/out.fmt, c /tmp/tf.dat, d /tmp/gsf, e /tmp/sc.sh, f /tmp/il.pic, g /tmp/tl.pic, h /tmp/ds.pic, i /tmp/tfa, and j /tmp/sed temporary files, related to the 1 optics2rad, 2 pdelta, 3...

CVE-2008-4978

radiance 3R9+20080530 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/opt.fmt, b /tmp/out.fmt, c /tmp/tf.dat, d /tmp/gsf, e /tmp/sc.sh, f /tmp/il.pic, g /tmp/tl.pic, h /tmp/ds.pic, i /tmp/tfa, and j /tmp/sed temporary files, related to the 1 optics2rad, 2 pdelta, 3...

CVE-2008-4966: Improper Link Resolution Before File Access

linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/snap and b /tmp/nightly temporary files, related to the 1 maysnap and 2 maytest scripts...