8898 matches found
CVE-2008-5140
trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/opr.ini. or 2 /tmp/lpt.zip temporary file...
CVE-2008-5145
ltpmenu in ltp 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/runltp.mainmenu. temporary file...
CVE-2008-5141
CVE-2008-5141 affects flamethrower up to version 0.1.8, where local users can overwrite arbitrary files through a symlink attack on a temporary file in /tmp (multicast.tar).##### The Debian advisory DSA-1676-1 fixes this in flamethrower 0.1.8-1+etch1 for etch, and Debian unstable sid received an ...
CVE-2008-5150
CVE-2008-5150 affects maildirsync 1.1, where sample.sh allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-*.#####.log temporary file. The underlying issue is a symlink-based path manipulation in a temporary log file, enabling local write access to targ...
CVE-2008-5151
CVE-2008-5151 affects mayavi 1.5. The issue is a symlink attack on the temporary file /tmp/err.log, allowing local users to overwrite arbitrary files. The connected documents confirm this as the underlying vulnerability, with no additional exploit details or remediation provided in the available ...
CVE-2008-5135
The CVE refers to os-prober 1.17, where a local user can exploit a symlink to overwrite files via /tmp/mounted-map or /tmp/raided-map. The core issue is a symlink/temporary file handling path in the insecure code path. Several connected sources (NVD, Red Hat, Debian/Ubuntu advisories, and Nessus ...
CVE-2008-5145
CVE-2008-5145 affects ltpmenu in ltp (20060918). Local users can overwrite arbitrary files via a symlink attack on the temporary file /tmp/runltp.mainmenu.#####, enabling potential local privilege impact. The records do not specify a vendor patch or fix version in the provided documents. The root...
CVE-2008-5156
The CVE-2008-5156 entry concerns systemimager-server 3.6.3, specifically the si_mkbootserver component. A local attacker can exploit a symlink race to overwrite arbitrary files via temporary files in /tmp (either .inetd.conf or pxe.conf. .tmp). This results in a local, non-remote attack with impa...
CVE-2008-5141
flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar. temporary file...
CVE-2008-5135
os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/mounted-map or 2 /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating "the insecure code path should only ever run inside a d-i environment, which has no non-roo...
CVE-2008-5138
passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd. temporary file...
CVE-2008-5157
Removed by vendor...
CVE-2008-5144
nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvidia-cg-toolkit-manifest temporary file...
CVE-2008-5146
add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file...
CVE-2008-5152
inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...
CVE-2008-5136
tkusr in tkusr 0.82 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/tkusr.pgm temporary file...
CVE-2008-5154
bluetooth.rc in p3nfs 5.19 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/blue.log temporary file...
CVE-2008-5143
mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.debug or 2 /tmp/.env temporary file...