DEBIAN-CVE-2004-0404

logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp...

CVE-2004-0404

logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp...

DEBIAN-CVE-2004-0422

flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...

CVE-2004-0422

flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...

CVE-2004-0404

logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp...

DEBIAN-CVE-2004-0423

The logevent function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file...

RHEL 2.1 : python (RHSA-2003:048)

An insecure use of a temporary file has been found in Python. Python is an interpreted, interactive, object-oriented programming language. Zack Weinberg discovered that os.execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names. This could allow local users t...

CVE-2004-0581

CVE-2004-0581 affects Mandrake Linux 9.1–10.0 and Corporate Server 2.1, where the ksymoop s-gznm script allows local users to delete arbitrary files via a symlink attack on files in /tmp. The root cause, as described in related advisories, is improper checking when copying a file to /tmp, enablin...

CVE-2004-0581

ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp...

CVE-2004-0545

CVE-2004-0545 affects AIX 5.1 and 5.2 where the LVM component allows local users to overwrite arbitrary files via a symlink attack . The vulnerability is described as local-access, with the impact of potentially compromising file integrity via symlink tricks. Related Nessus entries for AIX 5.1/5....

CVE-2003-0193

msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names "word$$.html"...

CVE-2003-0193

msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names "word$$.html"...

CVE-2003-0193

The CVE-2003-0193 issue affects xlsview (part of catdoc) prior to 0.91.5, where msxlsview.sh could be abused via a symlink to overwrite arbitrary files with a predictable temporary name (word$$.html), enabling local privilege effects. Debian/DSA-575-1 fixes this by updating catdoc to a newer rele...

CVE-2004-0388

The mysqldmulti script in MySQL allows local users to overwrite arbitrary files via a symlink attack...

CVE-2004-0388

The mysqldmulti script in MySQL allows local users to overwrite arbitrary files via a symlink attack...

security flaw

Utempter allows device names that contain .. dot dot directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files...

wgetuhoh.txt

Tested software: Wget 1.9, Wget 1.9.1 Wget checks for the presence of a file with the same name of the one invoqued at the command line, if the file exists, then it saves the downloaded file with a different name. The problem is that Wget does not lock the file, and directly writes to it. So...

CVE-2004-0422

flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...

CVE-2004-0422

flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...

CVE-2004-0422

CVE-2004-0422 concerns the flim Emacs library, where temporary files are created insecurely (before 1.14.3), allowing a local user to overwrite arbitrary files via a symlink attack. Public advisories document that this could enable local privilege impact, with a CVSS v2 base score of 2.1 (LOW). R...