CVE-2008-4946: Improper Link Resolution Before File Access

convirt 0.8.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/setoutput temporary file, related to the 1 template/provision.sh, 2 LinuxCDInstall/provision.sh, 3 FedoraPVInstall/provision.sh, 4 CentOSPVInstall/provision.sh, 5 common/provision.sh, 6...

CVE-2008-4935: Improper Link Resolution Before File Access

asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview.pgm temporary file...

CVE-2008-4940: Improper Link Resolution Before File Access

xmlfile.py in aptoncd 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/aptoncd temporary file...

CVE-2008-4941: Improper Link Resolution Before File Access

arb-common 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/arbfdnaml, b /tmp/arbpids, c /tmp/arbdsmz.html, and d /tmp/arbdsmz.htm temporary files, related to the 1 arbfastdnaml and 2 dszmconnect.pl scripts...

CVE-2008-4949: Improper Link Resolution Before File Access

dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cil, b /tmp/pdo, and c /tmp/pdn temporary files, related to the 1 patcil and 2 patdiff scripts...

CVE-2008-4951: Improper Link Resolution Before File Access

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

CVE-2008-4954: Improper Link Resolution Before File Access

mead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/debugbuf temporary file...

CVE-2008-4959: Improper Link Resolution Before File Access

geo-code in gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/geo.google, 2 /tmp/geo.yahoo, 3 /tmp/geo.coords, and 4 /tmp/geo.coords temporary files...

CVE-2008-4957: Improper Link Resolution Before File Access

findflags in Kitware GCC-XML gccxml 0.9.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.cxx temporary file...

CVE-2008-4950: Improper Link Resolution Before File Access

gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments...

CVE-2008-4945: Improper Link Resolution Before File Access

amlabel-cdrw in cdrw-taper 0.4 might allow local users to overwrite arbitrary files via a symlink attack involving a /tmp/amlabel-cdrw. temporary directory...

CVE-2008-4952: Improper Link Resolution Before File Access

emacs-jabber in emacs-jabber 0.7.91 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.log temporary file...

CVE-2008-4925

Multiple insecure method vulnerabilities in MW6 Technologies DataMatrix ActiveX control DATAMATRIXLib.MW6DataMatrix, DataMatrix.dll 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the 1 SaveAsBMP and 2 SaveAsWMF methods...

Design/Logic Flaw

Multiple insecure method vulnerabilities in MW6 Technologies DataMatrix ActiveX control DATAMATRIXLib.MW6DataMatrix, DataMatrix.dll 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the 1 SaveAsBMP and 2 SaveAsWMF methods...

CVE-2008-4908

maps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-4908: Improper Link Resolution Before File Access

maps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-4639: Improper Link Resolution Before File Access

jhead.c in Matthias Wandel jhead 2.84 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-4583

Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8File method...

Security feature bypass

Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8File method...

CVE-2008-4583: Undefined Security Weakness

Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component ChilkatCert.dll allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8File method...