Gentoo Security Advisory GLSA 200405-05 (utempter)

The remote host is missing updates announced in advisory GLSA 200405-05. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200501-33 (mysql)

The remote host is missing updates announced in advisory GLSA 200501-33. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200804-09 (am-utils)

The remote host is missing updates announced in advisory GLSA 200804-09. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200409-15 (Usermin)

The remote host is missing updates announced in advisory GLSA 200409-15. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200804-11 (policyd-weight)

The remote host is missing updates announced in advisory GLSA 200804-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-4108

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

CVE-2008-4108

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

DEBIAN-CVE-2008-4108

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

Directory traversal

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

CVE-2008-4108

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

CVE-2008-4108

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

CVE-2008-4108

The CVE-2008-4108 entry concerns Tools/faqwiz/move-faqwiz.sh (the generic FAQ wizard moving tool) in Python 2.4.5, where a local attacker could cause a symlink attack on a temporary file (tmp$RANDOM.tmp) to overwrite arbitrary files. According to the NVD/mitigations notes, this is a local vulnera...

CVE-2008-4085

plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on 1 cut.$$, 2 head.$$, 3 awk.$$, and 4 ps.$$ temporary files in /tmp/...

CVE-2008-4085

plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on 1 cut.$$, 2 head.$$, 3 awk.$$, and 4 ps.$$ temporary files in /tmp/...

CVE-2008-4085

plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on 1 cut.$$, 2 head.$$, 3 awk.$$, and 4 ps.$$ temporary files in /tmp/...

Command injection

plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on 1 cut.$$, 2 head.$$, 3 awk.$$, and 4 ps.$$ temporary files in /tmp/...

CVE-2008-4085

plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on 1 cut.$$, 2 head.$$, 3 awk.$$, and 4 ps.$$ temporary files in /tmp/...

CVE-2008-4085

Plaiter (Plait) before 1.6 is affected by a local file overwrite vulnerability. The issue arises from a symlink attack on temporary files in /tmp (cut.$$, head.$$, awk.$$, ps.$$), allowing local users to overwrite arbitrary files. The root cause is unsafe handling of temporary filenames leading t...

CVE-2008-4085

plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on 1 cut.$$, 2 head.$$, 3 awk.$$, and 4 ps.$$ temporary files in /tmp/...

GLSA-200809-08 : Amarok: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200809-08 Amarok: Insecure temporary file creation Dwayne Litzenberger reported that the MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp uses the albuminfo.xml temporary file in an insecure...