CVE-2008-4958

CVE-2008-4958 : gdrae 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gdrae/palabra temporary file. The underlying issue is a symlink race in temporary-file handling. The impact is described as complete confidentiality, integrity, and availability for a local ...

CVE-2008-4960

CVE-2008-4960 affects the impose+ 0.2 package. The vulnerability allows local users to overwrite arbitrary files via a symlink attack on temporary files: (1) /tmp/-tmp.ps and (2) /tmp/bboxx- . The connected sources consistently describe this local overwrite risk but do not provide detailed exploi...

CVE-2008-4935

CVE-2008-4935 affects the aview image viewer (version 1.3.0) and is caused by insecure temporary file handling: it uses a path like /tmp/aview$$$.pgm, enabling a local attacker to perform a symlink attack and overwrite arbitrary files with the privileges of the running user. Impact is described a...

CVE-2008-4938

CVE-2008-4938 affects aegis 4.24 and aegis-web 4.24. Local users can overwrite arbitrary files via a symlink attack on temporary files (examples: /tmp/#####, /tmp/#####.intro, /tmp/aegis.#####.ae, /tmp/aegis.#####.log, /tmp/aegis.#####.out, etc.) related to scripts (bng_dvlpd.sh, bng_rvwd.sh, awt...

CVE-2008-4940

CVE-2008-4940 affects aptoncd 0.1, where xmlfile.py allows local users to overwrite arbitrary files via a symlink attack on the /tmp/aptoncd temporary file. The root cause is a symlink-based file overwrite during temporary-file handling, enabling local privilege or data impact as described. The c...

CVE-2008-4941

CVE-2008-4941 affects arb-common 0.0.20071207.1. Local users can overwrite arbitrary files via a symlink attack on temporary files: /tmp/arb_fdnaml_, /tmp/arb_pids_ , /tmp/arbdsmz.html, and /tmp/arbdsmz.htm, related to the arb_fastdnaml and dszmconnect.pl scripts. Documented impact is local privi...

CVE-2008-4942

CVE-2008-4942 affects audiolink 0.05. A local symlink attack could cause overwriting of arbitrary files via temporary files /tmp/audiolink.db.tmp and /tmp/audiolink.tb.tmp. The connected documents confirm the vulnerable component and the attack surface; exploitation details and remediation are no...

CVE-2008-4953

FireHOL 1.256 is affected by a local vulnerability allowing unprivileged users to overwrite temporary files via a symlink attack on /tmp/.firehol-tmp-#####-- and /tmp/firehol.conf. The vendor disputes the issue, claiming exploitation requires creating a large number of symlinks. Connected sources...

CVE-2008-4959

CVE-2008-4959 affects gpsdrive-scripts (2.10~pre4). A symlink attack allows a local user to overwrite arbitrary files via temporary files (e.g., /tmp/geo.google, /tmp/geo.yahoo, /tmp/geo.coords, /tmp/geo#####.coords). Multiple sources (Red Hat, SUSE, Fedora advisories and open-source references) ...

CVE-2008-4942

audiolink in audiolink 0.05 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/audiolink.db.tmp and 2 /tmp/audiolink.tb.tmp temporary files...

CVE-2008-4941

arb-common 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/arbfdnaml, b /tmp/arbpids, c /tmp/arbdsmz.html, and d /tmp/arbdsmz.htm temporary files, related to the 1 arbfastdnaml and 2 dszmconnect.pl scripts...

CVE-2008-4942

audiolink in audiolink 0.05 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/audiolink.db.tmp and 2 /tmp/audiolink.tb.tmp temporary files...

CVE-2008-4946

convirt 0.8.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/setoutput temporary file, related to the 1 template/provision.sh, 2 LinuxCDInstall/provision.sh, 3 FedoraPVInstall/provision.sh, 4 CentOSPVInstall/provision.sh, 5 common/provision.sh, 6...

CVE-2008-4950

gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments...

CVE-2008-4944

writtercontrol in cdcontrol 1.90 allows local users to overwrite arbitrary files via a symlink attack on /tmp/v-recorder-out temporary files...

CVE-2008-4960

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/-tmp.ps and 2 /tmp/bboxx- temporary files...

CVE-2008-4946

CVE-2008-4946 affects convirt 0.8.2, where local users can overwrite arbitrary files via a symlink attack on the /tmp/set_output temporary file. The vulnerability is exercised through multiple provision.sh scripts (in template , Linux_CD_Install, Fedora_PV_Install, CentOS_PV_Install, common, exam...

CVE-2008-4955

freevo.real in freevo 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/-.pid, 2 /tmp/freevo-gdb, 3 /tmp/freevo-gdb.sh, and 4 /tmp/.stats temporary files. NOTE: this issue is only a vulnerability when a verbose debug mode is activated by modifying source code...

CVE-2008-4956

fwbinstall in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent. temporary file...

CVE-2008-4939

apertium 3.0.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.lex.cc, b /tmp/.deformat.l, c /tmp/.reformat.l, d /tmp/docxorig, e /tmp/docxsalida.zip, f /tmp/xlsxembed, g /tmp/xlsxorig, and h /tmp/xslxsalida.zip temporary files, related to the 1...