CVE-2008-5369

CVE-2008-5369 affects noip2 version 2.1.7, where a local user can overwrite arbitrary files via a symlink attack on the /tmp/noip2 temporary file. The underlying issue is a symlink race that enables local privilege influence on file contents. The available documents explicitly state the vulnerabi...

CVE-2008-5366

CVE-2008-5366 affects the postinst script of the Debian/PPP package (ppp 2.4.4rel). A local attacker can exploit a symlink vulnerability to overwrite arbitrary files via temporary files in /tmp (/tmp/probe-finished or /tmp/ppp-errors). Impact is described as local, with potential data corruption ...

CVE-2008-5373

CVE-2008-5373 affects bacula-common 2.4.2, where the small in-component mtx-changer.Adic-Scalar-24 can be abused by a local attacker to overwrite arbitrary files via a symlink attack on a /tmp/mtx.##### file. The issue is a local privilege/impact chain (CONFIDENTIALITY, INTEGRITY, and AVAILABILIT...

CVE-2008-5376

editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.tag.tmp temporary file...

CVE-2008-5368

muttprint in muttprint 0.72d allows local users to overwrite arbitrary files via a symlink attack on the /tmp/muttprint.log temporary file...

CVE-2008-5373

mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mtx. temporary file, probably a related issue to CVE-2005-2995...

CVE-2008-5375

cmus-status-display in cmus 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cmus-status temporary file...

CVE-2008-5378

arb-kill in arb 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/arbpids temporary file...

CVE-2008-5380

Gpsdrive (gpsdrive-scripts) has multiple local-privilege vectors via symlink attacks in /tmp (geo-*.coords, geo.google, geo.yahoo, geo.# etc.), affecting versions around 2.09–2.10~pre4. The root cause is insecure temporary-file handling in geo-code/geo-nearest and related scripts, allowing local ...

CVE-2008-5377

CVE-2008-5377 : A local privilege-escalation in CUPS 1.3.8 via the pstopdf filter. The vulnerability arises from a symlink attack on the temporary file /tmp/pstopdf.log, allowing local users to overwrite arbitrary files and potentially gain elevated privileges. Public references include exploit-d...

CVE-2008-5379

Summary: CVE-2008-5379 affects netdisco-mibs-installer 1.0. A local attacker can exploit a symlink attack on the temporary file /tmp/netdisco-mibs-0.6.tar.gz to overwrite arbitrary files, related to the netdisco-mibs-install and netdisco-mibs-download scripts. The vulnerability is labeled as loca...

CVE-2008-5375

cmus-status-display in cmus 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cmus-status temporary file...

CVE-2008-5374

bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb.? temporary file, related to the 1 aliasconv.sh, 2 aliasconv.bash, and 3 cshtobash scripts...

CVE-2008-5374

bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb.? temporary file, related to the 1 aliasconv.sh, 2 aliasconv.bash, and 3 cshtobash scripts...

CVE-2008-5373

mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mtx. temporary file, probably a related issue to CVE-2005-2995...

CVE-2008-5368

muttprint in muttprint 0.72d allows local users to overwrite arbitrary files via a symlink attack on the /tmp/muttprint.log temporary file...

CVE-2008-5372

The CVE-2008-5372 entry concerns sdm-login in sdm-terminal 0.4.0b, where a local user can exploit a symlink vulnerability to overwrite the temporary file /tmp/sdm.autologin.once. This is a local privilege issue that can impact confidentiality and integrity (as indicated by the CVE data) through a...

CVE-2008-5366

The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/probe-finished or 2 /tmp/ppp-errors temporary file...

CVE-2008-5367

ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file...

CVE-2008-5378

CVE-2008-5378 : The arb-kill utility (arb 0.0.20071207.1) is vulnerable to a local privilege escalation via a symlink attack on a /tmp/arb_pids__ file, allowing a local user to overwrite arbitrary files. The issue is rooted in unsafe handling of the temporary file used by arb, enabling a symlink ...