8846 matches found
DEBIAN-CVE-2007-5200
hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugindebugoptimresults.txt temporary file...
CVE-2007-5200
hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugindebugoptimresults.txt temporary file...
CVE-2007-5200
CVE-2007-5200 affects hugin on multiple distros (e.g., openSUSE, Fedora, Gentoo). It enables a local user to overwrite arbitrary files via an insecurely created hugin_debug_optim_results.txt, through a symlink attack. Documented impacts: local access with possible file overwrite of privileges; no...
Code injection
The 1 tramp-make-temp-file and 2 tramp-make-tramp-temp-file functions in Tramp 2.1.10 extension for Emacs, and possibly earlier 2.1.x versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2007-5377
The 1 tramp-make-temp-file and 2 tramp-make-tramp-temp-file functions in Tramp 2.1.10 extension for Emacs, and possibly earlier 2.1.x versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2007-5377
The 1 tramp-make-temp-file and 2 tramp-make-tramp-temp-file functions in Tramp 2.1.10 extension for Emacs, and possibly earlier 2.1.x versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2007-5377
The CVE concerns TRAMP (Emacs extension) specifically tramp-make-temp-file and tramp-make-tramp-temp-file in TRAMP 2.1.10 (and possibly earlier 2.1.x). The described flaw is insecure temporary file creation that enables a local attacker to exploit a symlink to overwrite arbitrary files within the...
GLSA-200710-05 : QGit: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200710-05 QGit: Insecure temporary file creation Raphael Marichez discovered that the DataLoader::doStart method creates temporary files in an insecure manner and executes them. Impact : A local attacker could perform a symlink...
QGit: Insecure temporary file creation
Background QGit is a graphical interface to git repositories that allows you to browse revisions history, view patch content and changed files. Description Raphael Marichez discovered that the DataLoader::doStart method creates temporary files in an insecure manner and executes them. Impact A loc...
CVE-2004-2697
Technical details for CVE-2004-2697 are not publicly available in the provided documents; monitor for updates.
CVE-2004-2698
Race condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local users to cause a denial of service IMWheel crash and possibly modify arbitrary files via a symlink attack on the imwheel.pid file...
CVE-2004-2698
Race condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local users to cause a denial of service IMWheel crash and possibly modify arbitrary files via a symlink attack on the imwheel.pid file...
CVE-2004-2697
The Inventory Scout daemon invscoutd 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument log file. NOTE: this might be related to CVE-2006-5002...
CVE-2004-2698
The CVE-2004-2698 entry concerns a race condition in IMWheel before or at 1.0.0pre11 when run with the -k option. This condition can allow a local attacker to cause a denial of service (IMWheel crash) and, via a symlink attack on the imwheel.pid file, potentially modify arbitrary files. The conne...
Design/Logic Flaw
guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.PID temporary file...
DEBIAN-CVE-2007-5207
guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.PID temporary file...
CVE-2007-5207
guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.PID temporary file...
CVE-2007-5207
guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.PID temporary file...