applePanther.txt

Apple OSX Panther Internet Connect - Local root Vulnerability. ============================================================== Date: 25.07.2004 Author: B-r00t. 2004. Email: B-r00t Vendor: Apple Operating System: OSX Panther Possibly Previous Versions. Application: Internet Connect.app Tested:...

CVE-2004-0698

4D WebSTAR (FTP/Server) is affected: versions up to 5.3.2 and earlier contain a local symbolic link vulnerability caused by opening files without properly verifying their existence or absolute location. This design issue can let a local attacker write to arbitrary files with the application’s per...

CVE-2004-0655

CVE-2004-0655 affects esearch = 0.6.2. If upgrading is not immediately possible, there is no workaround noted in the public documents. Exploitation details or live in-the-wild status are not provided beyond the advisory content in the connected documents.

CVE-2004-0647

CVE-2004-0647 affects Shorewall: versions 1.4.10c and earlier, and 2.0.x before 2.0.3a, are vulnerable to a local symlink attack on the temporary file chains-$$, enabling a local user to overwrite arbitrary files. Connected advisories corroborate insecure temporary file handling and report potent...

CVE-2004-0647

shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file...

CVE-2004-0655

eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file...

CVE-2004-0647

shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file...

CVE-2004-0422

flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...

CVE-2004-0423

The logevent function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file...

DEBIAN-CVE-2004-0404

logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp...

CVE-2004-0423

The logevent function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file...

CVE-2004-0404

logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp...

DEBIAN-CVE-2004-0422

flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...

CVE-2004-0422

flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...

CVE-2004-0404

logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp...

DEBIAN-CVE-2004-0423

The logevent function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file...

RHEL 2.1 : python (RHSA-2003:048)

An insecure use of a temporary file has been found in Python. Python is an interpreted, interactive, object-oriented programming language. Zack Weinberg discovered that os.execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names. This could allow local users t...

CVE-2004-0581

CVE-2004-0581 affects Mandrake Linux 9.1–10.0 and Corporate Server 2.1, where the ksymoop s-gznm script allows local users to delete arbitrary files via a symlink attack on files in /tmp. The root cause, as described in related advisories, is improper checking when copying a file to /tmp, enablin...

CVE-2004-0581

ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp...

CVE-2004-0545

CVE-2004-0545 affects AIX 5.1 and 5.2 where the LVM component allows local users to overwrite arbitrary files via a symlink attack . The vulnerability is described as local-access, with the impact of potentially compromising file integrity via symlink tricks. Related Nessus entries for AIX 5.1/5....