8843 matches found
CVE-2006-1695
The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-PID...
CVE-2006-1695
The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-PID...
DEBIAN-CVE-2006-1695
The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-PID...
Code injection
The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-PID...
CVE-2006-1695
The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-PID...
CVE-2006-1695
The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-PID...
CVE-2006-1695
The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-PID...
CVE-2006-1695
The CVE-2006-1695 issue affects the fbgs script in the fbi package (notably version around 2.01-1.4) where, if TMPDIR is not defined, a local user can exploit a symlink in /var/tmp/fbps-[PID] to overwrite arbitrary files. The vulnerability arises from creating a predictable temporary directory, e...
CVE-2002-2210
The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAMEautoresponse.conf temporary file...
CVE-2002-2210
The CVE-2002-2210 entry concerns OpenOffice 1.0.1, where local users can overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file. The root cause is a symlink handling issue that allows a nearby user to redirect writes to a privileged or s...
[SECURITY] [DSA 1022-1] New storebackup packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1022-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 4th, 2006 http://www.debian.org/security/faq -...
CVE-2006-1390
The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to modify saved games files to execute arbitrary code via buffer overflows and overwrite arbitrary files via symlink attacks...
CVE-2006-0050
snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file...
CVE-2006-0050
snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file...
CVE-2006-0050
snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file...
Design/Logic Flaw
snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file...
DEBIAN-CVE-2006-0050
snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file...
CVE-2006-0050
CVE-2006-0050 : Debian’s snmptrapfmt vulnerability allows local users to overwrite arbitrary files via a symlink attack on a temporary log file. It arises from not preventing overwriting when writing temp files. Public docs corroborate a Debian advisory (DSA-1013-1) with a fixed version cited for...