CVE-2008-4938

aegis 4.24 and aegis-web 4.24 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/, b /tmp/.intro, c /tmp/aegis..ae, d /tmp/aegis., e /tmp/aegis..1, f /tmp/aegis..2, g /tmp/aegis..log, and h /tmp/aegis..out temporary files, related to the 1 bngdvlpd.sh, 2 bngrvwd.sh, 3...

CVE-2008-4951

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

CVE-2008-4948

fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddjfest.tmp temporary file...

CVE-2008-4937

senddoc in OpenOffice.org OOo 2.4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/log.obr. temporary file...

CVE-2008-4935

asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview.pgm temporary file...

CVE-2008-4956

fwbinstall in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent. temporary file...

Arbitrary file deletion

asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview.pgm temporary file...

CVE-2008-4952

emacs-jabber in emacs-jabber 0.7.91 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.log temporary file...

CVE-2008-4947

dhis-dummy-log-engine in dhis-server 5.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/dhis-dummy-log-engine.log temporary file...

CVE-2008-4940

xmlfile.py in aptoncd 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/aptoncd temporary file...

CVE-2008-4951

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

CVE-2008-4938

aegis 4.24 and aegis-web 4.24 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/, b /tmp/.intro, c /tmp/aegis..ae, d /tmp/aegis., e /tmp/aegis..1, f /tmp/aegis..2, g /tmp/aegis..log, and h /tmp/aegis..out temporary files, related to the 1 bngdvlpd.sh, 2 bngrvwd.sh, 3...

CVE-2008-4941

arb-common 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/arbfdnaml, b /tmp/arbpids, c /tmp/arbdsmz.html, and d /tmp/arbdsmz.htm temporary files, related to the 1 arbfastdnaml and 2 dszmconnect.pl scripts...

CVE-2008-4943

bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/error.txt, b /tmp/errores.txt, and possibly other temporary files, related to the 1 creabulmafact, 2 creabulmacont, and possibly 3 actualizabulmacont, 4 installbulmages-db, and 5...

CVE-2008-4935

asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview.pgm temporary file...

CVE-2008-4948

fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddjfest.tmp temporary file...

CVE-2008-4956

The CVE-2008-4956 issue affects Firewall Builder (fwbuilder) version around 2.1.19, specifically the fwb_install script. A local attacker can exploit a symlink/temporary file handling to overwrite arbitrary files in the system (via /tmp/ssh-agent). This represents a local privilege escalation ris...

CVE-2008-4958

CVE-2008-4958 : gdrae 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gdrae/palabra temporary file. The underlying issue is a symlink race in temporary-file handling. The impact is described as complete confidentiality, integrity, and availability for a local ...

CVE-2008-4960

CVE-2008-4960 affects the impose+ 0.2 package. The vulnerability allows local users to overwrite arbitrary files via a symlink attack on temporary files: (1) /tmp/-tmp.ps and (2) /tmp/bboxx- . The connected sources consistently describe this local overwrite risk but do not provide detailed exploi...

CVE-2008-4935

CVE-2008-4935 affects the aview image viewer (version 1.3.0) and is caused by insecure temporary file handling: it uses a path like /tmp/aview$$$.pgm, enabling a local attacker to perform a symlink attack and overwrite arbitrary files with the privileges of the running user. Impact is described a...