8843 matches found
security flaw
Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files...
USN-223-1: Inkscape vulnerability
Javier Fernández-Sanguino Peña discovered that Inkscape's ps2epsi.sh script, which converts PostScript files to Encapsulated PostScript format, creates a temporary file in an insecure way. A local attacker could exploit this with a symlink attack to create or overwrite arbitrary files with the...
DTSA-26-1 trackballs - symlink attack
Bulletin has no description...
CVE-2004-2634
Technical details about CVE-2004-2634 are not publicly provided in the supplied documents. The materials list the vulnerability description but do not include affected versions, exploit vectors, or remediation specifics. Monitor for updates.
CVE-2005-3885
The ps2epsi extension shell script ps2epsi.sh in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file...
DEBIAN-CVE-2005-3885
The ps2epsi extension shell script ps2epsi.sh in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file...
CVE-2005-3885
The ps2epsi extension shell script ps2epsi.sh in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file...
CVE-2005-3885
The ps2epsi extension shell script ps2epsi.sh in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file...
CVE-2005-3885
Inkscape is affected by CVE-2005-3885 due to a hardcoded temporary file in the ps2epsi extension shell script (ps2epsi.sh), enabling local users to perform a symlink attack and overwrite arbitrary files. Affected versions were prior to the fixed releases mentioned in multiple advisories, includin...
CVE-2005-3885
The ps2epsi extension shell script ps2epsi.sh in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file...
CVE-2004-2605
CVE-2004-2605 affects aStats 1.6.5, enabling local users to overwrite arbitrary files via a symlink attack targeting the aStats-Graphic-Signature-Generation file and certain PNG images. The root cause is a symlink attack that can bypass file protections, compromising file integrity for targeted f...
CVE-2005-3785
Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX eix before 0.5.0pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which is processed by the diff-eix program...
CVE-2005-3785
The CVE-2005-3785 issue affects eix (Ebuild IndeX) prior to 0.5.0_pre2, where a second-order symlink vulnerability in the eix-sync.in path allows a local user to overwrite arbitrary files via a symlink to the exi.X.sync temporary file, processed by diff-eix. Exploitation is local and depends on c...
[SECURITY] [DSA 907-1] New ipmenu packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 907-1 [email protected] http://www.debian.org/security/ Martin Schulze November 23rd, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 907-1] New ipmenu packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 907-1 [email protected] http://www.debian.org/security/ Martin Schulze November 23rd, 2005 http://www.debian.org/security/faq -...
[Full-disclosure] [SECURITY] [DSA 907-1] New ipmenu packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 907-1 [email protected] http://www.debian.org/security/ Martin Schulze November 23rd, 2005 http://www.debian.org/security/faq -...
DSA-907-1 ipmenu - insecure temporary file
Bulletin has no description...
CVE-2004-2569
CVE-2004-2569 affects ipmenu prior to 0.0.3-5 for Debian GNU/Linux; it allows a local user to overwrite arbitrary files by creating a symlink to ipmenu.log. Debian’s DSA-907-1 fixes this by upgrading ipmenu to a safe version (0.0.3-5). Impact is local, with no remote vector described; no exploita...