8894 matches found
CVE-2008-4966
linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/snap and b /tmp/nightly temporary files, related to the 1 maysnap and 2 maytest scripts...
CVE-2008-4965
liguidsoap.py in liguidsoap 0.3.8.1+2 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/liguidsoap.liq, 2 /tmp/lig..log, and 3 /tmp/emission.ogg temporary files...
CVE-2008-4982
rkhunter in rkhunter 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rkhunter-debug temporary file. NOTE: this is probably a different vulnerability than CVE-2005-1270...
CVE-2008-4973
i2myspell in myspell 3.1 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/i2my.1 and 2 /tmp/i2my.2 temporary files...
CVE-2008-4988
CVE-2008-4988 affects pscal in xcal 4.1. It allows local users to overwrite arbitrary files through a symlink race against a temporary file in /tmp/pscal#####, enabling an arbitrary file overwrite vulnerability. Root cause is a symlink attack on the temporary file; impact is local confidentiality...
CVE-2008-4965
liguidsoap.py in liguidsoap 0.3.8.1+2 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/liguidsoap.liq, 2 /tmp/lig..log, and 3 /tmp/emission.ogg temporary files...
CVE-2008-4964
The CVE-2008-4964 entry concerns the konwert project (version 1.8) where the filters/any-UTF8 component is vulnerable. An attacker with local access can delete arbitrary files by exploiting a symlink attack on a temporary file named /tmp/any-#####. The description across sources consistently attr...
CVE-2008-4967
CVE-2008-4967 affects linuxtrade 3.65, enabling local users to overwrite arbitrary files via a symlink attack on /tmp/bwk, /tmp/zzz, and /tmp/ggg. This is tied to the linuxtrade.bwkvol, linuxtrade.wn, and moneyam.helper scripts. Exploitation details are not provided in the supplied documents; no ...
CVE-2008-4969
The CVE-2008-4969 issue affects ltp-network-test 20060918, where local users can overwrite arbitrary files via a symlink attack on multiple /tmp paths (including /tmp/vsftpd.conf and several /tmp/nfs_fsstress.*.log/.sardata files) linked to the scripts ftp_setup_vsftp_conf and nfs_fsstress.sh. Th...
CVE-2008-4977
Affected software: Postfix 2.5.2. Vulnerability: postfix_groups.pl allows local users to overwrite arbitrary files via a symlink attack on temporary files (/tmp/postfix_groups.stdout, /tmp/postfix_groups.stderr, /tmp/postfix_groups.message). The issue is dependent on a symlink/temporary-file race...
CVE-2008-4979
CVE-2008-4979 affects rancid 2.3.2~a8. A local user can cause a symlink attack to overwrite arbitrary files via /tmp/ipacct.#####.prefixes, /tmp/ipacct.#####.sorted, /tmp/ipacct.#####.pl, and /tmp/ipacct.##### temporary files. The connected sources confirm the four symlink targets and local-write...
CVE-2008-4983
CVE-2008-4983 affects scilab-bin 4.1.2. A local attacker can exploit insecure temporary file handling (symlink attacks) in the scilink, scidoc and scidem scripts to overwrite arbitrary files under /tmp and potentially affect files owned by the running user. Remediation per Gentoo GLSA 200901-14 i...
CVE-2008-4970
CVE-2008-4970 affects the Lustre file system: the runiozone component on Lustre 1.6.5 allows a local user to overwrite arbitrary files through a symlink race against the temporary file /tmp/iozone.log. The underlying issue is a local-file overwrite via a symlink attack. Exploitation is local and ...
PT-2008-6149 · Postfix · Postfix
Name of the Vulnerable Software and Affected Versions: Postfix version 2.5.2 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/postfix groups.stdout, /tmp/postfix groups.stderr, and /tmp/postfix groups.message temporary files. The vendor...
CVE-2008-4946
convirt 0.8.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/setoutput temporary file, related to the 1 template/provision.sh, 2 LinuxCDInstall/provision.sh, 3 FedoraPVInstall/provision.sh, 4 CentOSPVInstall/provision.sh, 5 common/provision.sh, 6...
CVE-2008-4949
dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cil, b /tmp/pdo, and c /tmp/pdn temporary files, related to the 1 patcil and 2 patdiff scripts...
CVE-2008-4953
firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.firehol-tmp--- and 2 /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create 1073741824PID-RANGE symlinks...
CVE-2008-4954
mead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/debugbuf temporary file...
