Debian DSA-588-1 : gzip - insecure temporary files

Trustix developers discovered insecure temporary file creation in supplemental scripts in the gzip package which may allow local users to overwrite files via a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

Debian DSA-575-1 : catdoc - insecure temporary file

A temporary file problem has been discovered in xlsview from the catdoc suite, convertors from Word to TeX and plain text, which could lead to local users being able to overwrite arbitrary files via a symlink attack on predictable temporary file names. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] [DSA 588-1] New gzip packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 588-1 [email protected] http://www.debian.org/security/ Martin Schulze November 8th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 588-1] New gzip packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 588-1 [email protected] http://www.debian.org/security/ Martin Schulze November 8th, 2004 http://www.debian.org/security/faq -...

DSA-588-1 gzip - insecure temporary files

Bulletin has no description...

[SECURITY] [DSA 583-1] New lvm10 packages fix insecure temporary directory

-------------------------------------------------------------------------- Debian Security Advisory DSA 583-1 [email protected] http://www.debian.org/security/ Martin Schulze November 3rd, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 583-1] New lvm10 packages fix insecure temporary directory

-------------------------------------------------------------------------- Debian Security Advisory DSA 583-1 [email protected] http://www.debian.org/security/ Martin Schulze November 3rd, 2004 http://www.debian.org/security/faq -...

USN-16-1: perl vulnerabilities

Recently, Trustix Secure Linux discovered some vulnerabilities in the perl package. The utility "instmodsh", the Perl package "PPPort.pm", and several test scripts which are not shipped and only used during build created temporary files in an insecure way, which could allow a symlink attack to...

[USN-15-1] lvm10 vulnerability

=========================================================== Ubuntu Security Notice USN-15-1 November 01, 2004 lvm10 vulnerability CAN-2004-0972 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty Warthog The followi...

DSA-583-1 lvm10 - insecure temporary directory

Bulletin has no description...

USN-15-1: lvm10 vulnerability

Recently, Trustix Secure Linux discovered a vulnerability in a supplemental script of the lvm10 package. The program "lvmcreateinitrd" created a temporary directory in an insecure way, which could allow a symlink attack to create or overwrite arbitrary files with the privileges of the user invoki...

[OpenPKG-SA-2004.046] OpenPKG Security Advisory (postgresql)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 OpenPKG Security Advisory The OpenPKG Project http://www.openpkg.org/security.html http://www.openpkg.org [email protected] [email protected] OpenPKG-SA-2004.046 29-Oct-2004 Package: postgresql Vulnerability: insecure temporary file...

USN-4-1: Standard C library script vulnerabilities

Recently, Trustix Secure Linux discovered some vulnerabilities in the libc6 package. The utilities "catchsegv" and "glibcbug" created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program...

[SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 575-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 575-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2004 http://www.debian.org/security/faq -...

DSA-575-1 catdoc - insecure temporary file

Bulletin has no description...

USN-6-1: postgresql contributed script vulnerability

Recently, Trustix Secure Linux discovered a vulnerability in the postgresql-contrib package. The script "makeoidjoinscheck" created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the script...

USN-3-1: GhostScript utility script vulnerabilities

Recently, Trustix Secure Linux discovered some vulnerabilities in the gs-common package. The utilities "pv.sh" and "ps2epsi" created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program...

security flaw

The mysqldmulti script in MySQL allows local users to overwrite arbitrary files via a symlink attack...

security flaw

The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files...