Design/Logic Flaw

tau 2.16.4 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/makefile.tau.. or 2 /tmp/makefile.tau. temporary file, related to the a taucxx, b tauf90, and c taucc scripts...

Arbitrary file deletion

testparser.py in mayavi 1.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/err.log temporary file...

Code injection

bluetooth.rc in p3nfs 5.19 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/blue.log temporary file...

Design/Logic Flaw

os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/mounted-map or 2 /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating "the insecure code path should only ever run inside a d-i environment, which has no non-roo...

CVE-2008-5157

tau 2.16.4 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/makefile.tau.. or 2 /tmp/makefile.tau. temporary file, related to the a taucxx, b tauf90, and c taucc scripts...

CVE-2008-5156

simkbootserver in systemimager-server 3.6.3 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.inetd.conf or 2 /tmp/pxe.conf..tmp temporary file...

CVE-2008-5148

sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ temporary file...

CVE-2008-5146

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file...

CVE-2008-5143

mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.debug or 2 /tmp/.env temporary file...

CVE-2008-5141

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar. temporary file...

CVE-2008-5138

passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd. temporary file...

Design/Logic Flaw

sendbug in freebsd-sendpr 3.113+5.3 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pr. temporary file...

CVE-2008-5149

fwdcheck.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ temporary file...

Arbitrary file deletion

ltpmenu in ltp 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/runltp.mainmenu. temporary file...

Design/Logic Flaw

passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd. temporary file...

CVE-2008-5157

tau 2.16.4 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/makefile.tau.. or 2 /tmp/makefile.tau. temporary file, related to the a taucxx, b tauf90, and c taucc scripts...

CVE-2008-5147

test-pipe-to-pyodconverter.org.sh in docvert 2.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/outer.odt temporary file...

CVE-2008-5156

simkbootserver in systemimager-server 3.6.3 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.inetd.conf or 2 /tmp/pxe.conf..tmp temporary file...

CVE-2008-5155

mail2sms.sh in smsclient 2.0.8z allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/header. or 2 /tmp/body. temporary file, or append data to arbitrary files via a symlink attack on the 3 /tmp/sms.log temporary file...

CVE-2008-5150

sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-..log temporary file...