8891 matches found
CVE-2008-4935
asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview.pgm temporary file...
CVE-2008-4936
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp. temporary file...
CVE-2008-4953
firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.firehol-tmp--- and 2 /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create 1073741824PID-RANGE symlinks...
CVE-2008-4939
CVE-2008-4939 affects apertium 3.0.7 and enables local users to overwrite arbitrary files via a symlink attack on temporary files created by apertium-gen-deformat, apertium-gen-reformat, and related scripts (files such as /tmp/#####.lex.cc, /tmp/#####.deformat.l, /tmp/#####.reformat.l, /tmp/#####...
CVE-2008-4947
dhis-dummy-log-engine in dhis-server 5.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/dhis-dummy-log-engine.log temporary file...
CVE-2008-4949
dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cil, b /tmp/pdo, and c /tmp/pdn temporary files, related to the 1 patcil and 2 patdiff scripts...
CVE-2008-4950
gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments...
CVE-2008-4952
emacs-jabber in emacs-jabber 0.7.91 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.log temporary file...
CVE-2008-4956
fwbinstall in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent. temporary file...
CVE-2008-4936
The CVE-2008-4936 issue affects mgetty 1.1.36 (faxspool). Local users can overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file, due to insecure temporary file handling in faxspool. The vulnerability is exploitable locally with no authentication required. A mitigatio...
CVE-2008-4951
CVE-2008-4951 affects dtc 0.29.6, enabling local users to overwrite arbitrary files through a symlink attack on /tmp/awstats.log, /tmp/spam.log.#####, and /tmp/spam_err.log, related to the accesslog.php and sa-wrapper scripts. The cited sources (NVD, SUSE, Ubuntu, CVE records) confirm the local a...
CVE-2008-4943
CVE-2008-4943 affects bulmages-servers 0.11.1 and allows local users to overwrite arbitrary files via a symlink attack targeting temporary files such as /tmp/error.txt and /tmp/errores.txt, with possible impact on related scripts (creabulmafact, creabulmacont, actualizabulmacont, installbulmages-...
CVE-2008-4945
CVE-2008-4945 affects amlabel-cdrw in cdrw-taper 0.4. A local user can exploit a symlink in /tmp/amlabel-cdrw to overwrite arbitrary files. Root cause: symlink attack during temporary directory handling. Impact: potential integrity and confidentiality impacts as described. No remediation details ...
CVE-2008-4947
The CVE-2008-4947 entry affects dhis-server 5.3, specifically the dhis-dummy-log-engine component. A local attacker can overwrite arbitrary files via a symlink attack on the /tmp/dhis-dummy-log-engine.log file. Public details describe the vulnerable file and attack class, but exploitation specifi...
CVE-2008-4950
CVE-2008-4950 affects dpkg-cross 2.3.0 and its gccross component, enabling local users to overwrite arbitrary files via a symlink attack on the temporary file tmp/gccross2.log. The vulnerability is consistently described across sources (NVD, Debian/GNU, Ubuntu trackers, OSV, and Nessus mention un...
CVE-2008-4954
CVE-2008-4954 affects mead.pl in fml 4.0.3. The issue arises from a symlink attack on the /tmp/debugbuf temporary file, enabling local users to overwrite arbitrary files. The connected records corroborate the vulnerability description but do not provide exploit code, affected versions beyond the ...
CVE-2008-4949
dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cil, b /tmp/pdo, and c /tmp/pdn temporary files, related to the 1 patcil and 2 patdiff scripts...
CVE-2008-4959
geo-code in gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/geo.google, 2 /tmp/geo.yahoo, 3 /tmp/geo.coords, and 4 /tmp/geo.coords temporary files...