8891 matches found
CVE-2008-4580
fencemanual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink attack on the fencemanual.fifo temporary file...
CVE-2008-4579
The 1 fenceapc and 2 fenceapcsnmp programs, as used in a fence 2.02.00-r1 and possibly b cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file...
CVE-2008-4580
CVE-2008-4580 affects fence_manual as used in fence 2.02.00-r1 (and possibly cman). The vulnerability arises from a symlink attack on the fence_manual.fifo temporary file, enabling local attackers to modify arbitrary files and potentially overwrite them with root privileges. The connected OpenVAS...
CVE-2008-4579
CVE-2008-4579 is tied to the fence components (fence_apc and fence_apc_snmp) used by fence 2.02.00-r1 and possibly cman. The vulnerability arises from insecure temporary file handling in verbose mode, enabling a local attacker to perform a symlink attack against the apclog file and append data to...
CVE-2008-4553
qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories...
CVE-2008-4553
qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories...
CVE-2008-4553
CVE-2008-4553 affects qemu, specifically the qemu-make-debian-root script, where temporary files are created insecurely. This local vulnerability in qemu 0.9.1-5 on Debian GNU/Linux allows a symlink attack to overwrite arbitrary files, potentially enabling local denial of service. Debian DSAs and...
CVE-2008-4580
fencemanual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink attack on the fencemanual.fifo temporary file...
PT-2008-5797 · Fence +1 · Fence +1
Name of the Vulnerable Software and Affected Versions: fence versions 2.02.00-r1 Description: The issue allows local users to append to arbitrary files via a symlink attack on the apclog temporary file when the fence apc and fence apc snmp programs are running in verbose mode. Recommendations: Fo...
PT-2008-5798 · Red Hat · Fence
Name of the Vulnerable Software and Affected Versions: fence versions 2.02.00-r1 Description: The issue allows local users to modify arbitrary files via a symlink attack on the fence manual.fifo temporary file. This is related to the fence manual component, which is used in fence and possibly cma...
CVE-2008-4579
The 1 fenceapc and 2 fenceapcsnmp programs, as used in a fence 2.02.00-r1 and possibly b cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file...
CVE-2008-4477
alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file...
Arbitrary file deletion
alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file...
CVE-2008-4477
alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file...
CVE-2008-4477
alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file...
CVE-2008-4477
The CVE pertains to the mon daemon (version 0.99.2) where the test.alert script creates insecure temporary files, allowing a local user to overwrite arbitrary files via a symlink attack on test.alert.log. This results in a local denial of service. Public details indicate the issue is fixed in Deb...
CVE-2008-4477
Removed by vendor...
CVE-2008-4476
sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympaaliases.$$ temporary file. NOTE: wwsympa.fcgi was also reported, but the issue occurred in a dead function, so it is not a vulnerability...
CVE-2008-4474
freeradius-dialupadmin in freeradius 2.0.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files in 1 backupradacct, 2 cleanradacct, 3 monthlytotstats, 4 totstats, and 5 truncateradacct...