CVE-2008-5137

CVE-2008-5137 affects tkman 2.2 and is due to insecure handling of temporary files (/tmp/tkman##### and /tmp/ll), enabling local symlink attacks to overwrite arbitrary files. The issue is documented across multiple sources (Gentoo GLSA 200909-07, SUSE/OpenSUSE advisories, and OpenVAS/Nessus entri...

CVE-2008-5136

CVE-2008-5136 affects tkusr 0.82. A local user can exploit a symlink attack on the temporary file /tmp/tkusr.pgm to overwrite arbitrary files. The root cause is improper handling of the temporary file, enabling a local privilege escalation/vector. The CVE entry documents impact as complete confid...

CVE-2008-5142

The affected component is sendbug in freebsd-sendpr 3.113+5.3 on Debian GNU/Linux. It is vulnerable to a local, pre-auth race where an attacker can overwrite arbitrary files through a symlink attack on a /tmp/pr.##### temporary file, indicating a local-privilege escalation/vector due to insecure ...

CVE-2008-5146

CVE-2008-5146 affects the ctn package (version 3.0.6) and describes a local vulnerability where a symlink attack on the temporary file /tmp/accession allows a local user to overwrite arbitrary files. The root cause is a lack of proper file handling for the accession temporary file, enabling an at...

CVE-2008-5138

CVE-2008-5138 affects libpam-mount (example: version 0.43) and is triggered by a local symlink attack targeting a temporary file named /tmp/passwdehd, allowing local users to overwrite arbitrary files. The connected advisories confirm a fix implemented as a security update for pam_mount in SUSE/o...

CVE-2008-5147

CVE-2008-5147 affects docvert 2.4 via a symlink attack in test-pipe-to-pyodconverter.org.sh that targets the temporary file /tmp/outer.odt. This local-access flaw allows local users to overwrite arbitrary files. The description and connected documents confirm the vulnerable component and the root...

CVE-2008-5153

CVE-2008-5153 affects Moodle: local attackers could exploit a symlink-based race to overwrite arbitrary files via temporary files /tmp/spell-check-debug.log, /tmp/spell-check-before, or /tmp/spell-check-after. Initial description identifies Moodle 1.8.2 as vulnerable with a local symlink attack. ...

CVE-2008-5157

The CVE-2008-5157 entry concerns tau 2.16.4. It describes a local-privilige escalation where local users can overwrite arbitrary files via a symlink attack targeting temporary files: /tmp/makefile.tau..##### or /tmp/makefile.tau .#####, associated with the tau_cxx, tau_f90, and tau_cc scripts. Th...

CVE-2008-5152

inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...

CVE-2008-5153

spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/spell-check-debug.log, 2 /tmp/spell-check-before, or 3 /tmp/spell-check-after temporary file...

PT-2008-6280 · Os-Prober +1 · Os-Prober +1

Name of the Vulnerable Software and Affected Versions: os-prober version 1.17 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/mounted-map or /tmp/raided-map temporary file. The vendor disputes this issue, stating that the insecure code path...

Race condition

rc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath allows local users to delete arbitrary files via a symlink attack on a directory under 1 /var/lock or 2 /var/run. NOTE: this issue exists because of a race condition in an incorrect fix for CVE-2008-3524. NOTE: exploitation may require ...

CVE-2008-4832

rc.sysinit in initscripts 8.12-8.21 and 8.56.15-0.1 on rPath allows local users to delete arbitrary files via a symlink attack on a directory under 1 /var/lock or 2 /var/run. NOTE: this issue exists because of a race condition in an incorrect fix for CVE-2008-3524. NOTE: exploitation may require ...

CVE-2008-4832

CVE-2008-4832 affects rc.sysinit in initscripts (versions 8.12-8.21 and 8.56.15-0.1 on rPath). The vulnerability stems from a race condition tied to an improper fix for CVE-2008-3524, enabling local users to delete arbitrary files via a symlink attack on a directory under /var/lock or /var/run. E...

OpenOffice senddoc Insecure Temporary File Creation Vulnerability - Windows

OpenOffice is prone to an insecure temporary file creation vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenOffice.org <= 2.4.1 senddoc Insecure Temporary File Creation Vulnerability - Linux

OpenOffice.org is prone to an insecure temporary file creation vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Insecure tempfile handling Vulnerability in TWiki (Sep 2008)

TWiki is prone to an insecure temp file handling vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:twiki:twiki";...

CVE-2008-5034

master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file. NOTE: the vendor disputes this vulnerability, stating 'this package does not have " possibility of attack with the help of symlinks"'...

Design/Logic Flaw

master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file. NOTE: the vendor disputes this vulnerability, stating 'this package does not have " possibility of attack with the help of symlinks"'...

CVE-2008-5034

master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file. NOTE: the vendor disputes this vulnerability, stating 'this package does not have " possibility of attack with the help of symlinks"'...