8898 matches found
CVE-2008-4996
The CVE-2008-4996 entry concerns initramfs-tools 0.92f, where a symlink attack on the /tmp/initramfs.debug file could allow local users to overwrite arbitrary files. The description notes that this vulnerability is disputed by the vendor, which says init is used in a single-user context and that ...
CVE-2008-4997
dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. NOTE: the vendor disputes this vulnerability, stating that the vector is solely "an EXAMPLE used in the manpage...
CVE-2008-4996
init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor disputes this vulnerability, stating that "init is used in a single-user context; there's no possibility that this is exploitable...
PT-2008-6168 · Twiki · Twiki
Name of the Vulnerable Software and Affected Versions: twiki version 4.1.2 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. The vendor disputes this issue, stating it is invalid. Recommendations: For twiki version 4.1.2,...
PT-2008-6167 · Unknown · Datafreedom-Perl
Name of the Vulnerable Software and Affected Versions: datafreedom-perl version 0.1.7 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. The vendor disputes this, stating that the vector is solely an example used in the...
PT-2008-6166 · Canonical +1 · Initramfs-Tools +1
Name of the Vulnerable Software and Affected Versions: initramfs-tools version 0.92f Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. The vendor disputes this, stating that init is used in a single-user context...
CVE-2008-4975
mkmailpost in newsgate 1.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mmp temporary file...
CVE-2008-4976
ogle 0.9.2 and ogle-mmx 0.9.2 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/ogleaudio., b /tmp/oglecli., c /tmp/oglectrl., d /tmp/oglegui., e /tmp/oglempegps., f /tmp/oglempegvs., g /tmp/oglenav., and h /tmp/oglevout., temporary files, related to the 1...
CVE-2008-4978
radiance 3R9+20080530 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/opt.fmt, b /tmp/out.fmt, c /tmp/tf.dat, d /tmp/gsf, e /tmp/sc.sh, f /tmp/il.pic, g /tmp/tl.pic, h /tmp/ds.pic, i /tmp/tfa, and j /tmp/sed temporary files, related to the 1 optics2rad, 2 pdelta, 3...
CVE-2008-4982
rkhunter in rkhunter 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rkhunter-debug temporary file. NOTE: this is probably a different vulnerability than CVE-2005-1270...
CVE-2008-4984
scratchbox2 1.99.0.24 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/dpkg..tmp, b /tmp/missingdeps., and c /tmp/sb2-pkg-chk.$tstamp. temporary files, related to the 1 dpkg-checkbuilddeps and 2 sb2-check-pkg-mappings scripts...
CVE-2008-4988
pscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal temporary file...
DEBIAN-CVE-2008-4987
xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/ldconfig.tmp, b /tmp/ldconf.tmp, and c /tmp/ld.so.conf temporary files, related to the 1 get-maptools.sh and 2 getshapelib.sh scripts...
CVE-2008-4987
xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/ldconfig.tmp, b /tmp/ldconf.tmp, and c /tmp/ld.so.conf temporary files, related to the 1 get-maptools.sh and 2 getshapelib.sh scripts...
DEBIAN-CVE-2008-4983
scilab-bin 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/SciLink1, b /tmp/SciLink2, c /tmp/SciLink3, d /tmp/., e /tmp/..res, f /tmp/..err, and g /tmp/..diff temporary files, related to the 1 scilink, 2 scidoc, and 3 scidem scripts...
DEBIAN-CVE-2008-4982
rkhunter in rkhunter 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rkhunter-debug temporary file. NOTE: this is probably a different vulnerability than CVE-2005-1270...
CVE-2008-4979
getipacctg in rancid 2.3.2a8 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/ipacct..prefixes, 2 /tmp/ipacct..sorted, 3 /tmp/ipacct..pl, and 4 /tmp/ipacct. temporary files...
CVE-2008-4980
delqueueask in rccp 0.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cccptmp.txt temporary file...