8899 matches found
CVE-2008-5143
CVE-2008-5143 affects mgt-helper in multi-gnome-terminal 1.6.2. The vulnerability allows local users to overwrite arbitrary files via a symlink attack on temporary files in /tmp, specifically targeting files matching *.debug or *.env. The root cause is a symlink-related race condition during file...
CVE-2008-5149
fwdcheck.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ temporary file...
CVE-2008-5148
CVE-2008-5148 affects geda-gnetlist; the sch2eaglepos.sh script creates a temporary file insecurely in /tmp, enabling local symlink attacks to overwrite arbitrary files. Affected package: gEDA/gNetlist, specifically around version 1.4.0. Impact: local privilege/file overwrite risk. Mitigation: up...
CVE-2008-5140
CVE-2008-5140 : MailScanner 4.55.10 and other versions before 4.74.16-1 are vulnerable to local user symlink attacks that can overwrite arbitrary files via temporary files such as /tmp/opr.ini.##### and /tmp/lpt*.zip, exposing a local-privilege risk. The underlying issue is a symlink-based overwr...
CVE-2008-5144
CVE-2008-5144 affects nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015. A local attacker can exploit a race with the temporary file /tmp/nvidia-cg-toolkit-manifest via a symlink attack to overwrite arbitrary files. The vulnerability is supported by multiple connected sources (NVD descrip...
CVE-2008-5152
CVE-2008-5152 affects mh-book 200605, specifically inmail-show, where local users can overwrite arbitrary files via a symlink attack to temporary files (/tmp/inmail#####.log or /tmp/inmail#####.stdin). The root cause is a symlink/TOCTOU race in handling these temp files. Documents consistently de...
CVE-2008-5154
The CVE-2008-5154 entry concerns bluetooth.rc in p3nfs 5.19, where local users can overwrite arbitrary files by exploiting a symlink attack against the /tmp/blue.log file. This is a local-privilege issue resulting from improper handling of temporary file names, enabling a limited-access user to a...
CVE-2008-5155
CVE-2008-5155 affects the smsclient component, specifically the mail2sms.sh script in version 2.0.8z. The vulnerability stems from symlink attacks on temporary files in /tmp, namely /tmp/header.##### and /tmp/body.#####, and on /tmp/sms.log. Local users can overwrite arbitrary files or append dat...
CVE-2008-5135
os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/mounted-map or 2 /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating "the insecure code path should only ever run inside a d-i environment, which has no non-roo...
CVE-2008-5144
nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvidia-cg-toolkit-manifest temporary file...
CVE-2008-5146
add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file...
CVE-2008-5150
sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-..log temporary file...
CVE-2008-5149
fwdcheck.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ temporary file...
CVE-2008-5137
tkman in tkman 2.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/tkman or 2 /tmp/ll temporary file...
CVE-2008-5148
sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ temporary file...
CVE-2008-5153
spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/spell-check-debug.log, 2 /tmp/spell-check-before, or 3 /tmp/spell-check-after temporary file...
CVE-2008-5149
The CVE-2008-5149 entry affects fwd_check.sh within libncbi6 6.1.20080302, enabling a local user to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file. This is a local-privilege-related vulnerability with impact to confidentiality, integrity, and availability as describ...
CVE-2008-5142
sendbug in freebsd-sendpr 3.113+5.3 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pr. temporary file...