8900 matches found
CVE-2008-5299
chm2pdf 0.9 allows user-assisted local users to delete arbitrary files via a symlink attack on .chm files in the 1 /tmp/chm2pdf/work or 2 /tmp/chm2pdf/orig temporary directories...
Design/Logic Flaw
chm2pdf 0.9 allows user-assisted local users to delete arbitrary files via a symlink attack on .chm files in the 1 /tmp/chm2pdf/work or 2 /tmp/chm2pdf/orig temporary directories...
CVE-2008-5299
Removed by vendor...
CVE-2008-5299
CVE-2008-5299 affects chm2pdf, where insecure handling of temporary directories (notably /tmp/chm2pdf/work and/or /tmp/chm2pdf/orig) enables a local attacker to delete arbitrary files via a symlink attack. The issue stems from unsafe use of fixed temporary directories in chm2pdf 0.9. In OpenVAS/N...
CVE-2008-5299
chm2pdf 0.9 allows user-assisted local users to delete arbitrary files via a symlink attack on .chm files in the 1 /tmp/chm2pdf/work or 2 /tmp/chm2pdf/orig temporary directories...
Debian GNU/Linux (symlink attack in login) Arbitrary File Ownership PoC
Exploit for linux platform in category local exploits ======================================================================= Debian GNU/Linux symlink attack in login Arbitrary File Ownership PoC ======================================================================= !/bin/bash - echo ' include...
Debian GNU/Linux (symlink attack in login) Arbitrary File Ownership PoC
No description provided by source. !/bin/bash - echo ' include string.h include stdlib.h include unistd.h include utmp.h include sys/types.h include stdio.h int mainint argc, char argv struct utmp entry; int i; entry.uttype=LOGINPROCESS; strcpyentry.utline,"/tmp/x"; entry.uttime=0;...
DSA-1676-1 flamethrower - denial of service
Bulletin has no description...
Debian - Symlink In Login Arbitrary File Ownership
Debian - Symlink In Login Arbitrary File Ownership !/bin/bash - echo ' include include include include include include int mainint argc, char argv struct utmp entry; int i; entry.uttype=LOGINPROCESS; strcpyentry.utline,"/tmp/x"; entry.uttime=0; strcpyentry.utuser,"badguy";...
Design/Logic Flaw
The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file...
CVE-2008-5256
The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file...
CVE-2008-5256
The CVE-2008-5256 entry concerns VirtualBox prior to 2.0.6. The vulnerability resides in AcquireDaemonLock (ipcdUnix.cpp) and enables local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file. CVSSv2 base score is 4.4 (Medium) with Local access, N...
CVE-2008-5141
flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar. temporary file...
CVE-2008-5142
sendbug in freebsd-sendpr 3.113+5.3 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pr. temporary file...
CVE-2008-5157
tau 2.16.4 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/makefile.tau.. or 2 /tmp/makefile.tau. temporary file, related to the a taucxx, b tauf90, and c taucc scripts...
CVE-2008-5144
nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvidia-cg-toolkit-manifest temporary file...
CVE-2008-5149
fwdcheck.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ temporary file...
CVE-2008-5155
mail2sms.sh in smsclient 2.0.8z allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/header. or 2 /tmp/body. temporary file, or append data to arbitrary files via a symlink attack on the 3 /tmp/sms.log temporary file...