8812 matches found
CVE-2003-0517
The vulnerability CVE-2003-0517 affects mgetty 1.1.28 and earlier, via the faxrunqd.in component. A symlink attack on JOB files allows local users to overwrite files, compromising file integrity. The issue stems from insufficient protections around JOB file handling, enabling local privilege-impa...
Qt temporary files race condition in Knoppix 3.1
Qt libaries works with KDE. Knoppix 3.1 comes with KDE3. A default installation on hard disk of this live CD linux distribution with the SSHD daemon running may allow a serious D.o.S. attack and potential root compromise. I've found a race condition in knoppix 3.1 live CD. I've confirmed it on 2...
PT-2003-1686 · Mgetty · Mgetty
Name of the Vulnerable Software and Affected Versions: mgetty versions 1.1.28 and earlier Description: The issue allows local users to overwrite files via a symlink attack on JOB files. This is achieved by exploiting the faxrunqd.in component in the affected software. Recommendations: For mgetty...
CVE-2003-0367
znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0367
znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...
DEBIAN-CVE-2003-0367
znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0438
eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0438
CVE-2003-0438 concerns the eldav WebDAV client for Emacs (versions 0.7.2 and earlier). Affected component is the client itself, where a symlink attack on temporary files allows a local user to create or overwrite arbitrary files with the privileges of the user running Emacs/eldav. The vulnerabili...
CVE-2003-0438
eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0367
znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0367
znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0367
CVE-2003-0367 concerns the gzip package, where the secondary scripts (gzexe, zdiff, znew) allow local users to overwrite arbitrary files via a symlink attack on temporary files. The issue is attributed to insecure temporary-file handling in these scripts, as noted in related advisories and CVE en...
[SECURITY] [DSA-308-1] New gzip packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 308-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 6th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA-308-1] New gzip packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 308-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 6th, 2003 http://www.debian.org/security/faq -...
DSA-308 gzip - insecure temporary files
Bulletin has no description...
CVE-2003-0214
run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
DEBIAN-CVE-2003-0214
run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0214
run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...