8806 matches found
man 'makewhatis' insecurely uses /tmp
Overview The 'makewhatis' script in the Linux man package allows local users to overwrite files via a symlink attack. Description The 'makewhatis' program is a Bourne shell script that ships with many Linux distributions in the 'man' package of programs. The 'makewhatis' script creates files in t...
[SECURITY] [DSA-059-1] man-db symlink attack
-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory DSA-059-1 [email protected] http://www.debian.org/security/ Wichert Akkerman June 12, 2001 -...
[SECURITY] [DSA-059-1] man-db symlink attack
Package : man-db Problem type : symlink attack Debian-specific: no Luki R. reported a bug in man-db: it did handle nested calls of dropeffectiveprivs and regaineffectiveprivs correctly which would cause it to regain privileges to early. This could be abused to make man create files as user man...
CVE-2001-1256
kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the 1 /tmp/.kmmodreglock and 2 /tmp/kmpath.tmp temporary files...
[RHSA-2001:074-03] Updated ispell packages available for Red Hat Linux 5.2 and 6.2
--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated ispell packages available for Red Hat Linux 5.2 and 6.2 Advisory ID: RHSA-2001:074-03 Issue date: 2001-05-30 Updated on: 2001-06-04 Product: Red Hat Linux Keywords: ispe...
CVE-2001-0300
oidldapd 2.1.1.1 in Oracle 8.1.7 records log files in a directory ldaplog that has world-writable permissions, which may allow local users to delete logs and/or overwrite other files via a symlink attack...
KDE KFM creates temporary files insecurely
Overview KDE's kfm creates and uses temporary cache directories insecurely. Description kfm, the KDE File Manager, creates a cache directory for each user. This directory is placed in /tmp and predictably named, based on the UID. These directories are created without checking for correct ownershi...
Due to insecure creation of configuration files via KApplication-class, local users can create arbitrary files when running setuid root KDE programs
Overview KApplication-class, a class used to create KDE applications, creates configuration files without checking for proper ownership or prior existence. Description KApplication-class, a class used to create KDE applications, creates configuration files. These files are created in a local...
CVE-2001-0384
The CVE-2001-0384 issue affects Reliant Sinix’s ppd component, where a local user can exploit a symlink in the /tmp/ppd.trace file to corrupt arbitrary files. The exists description confirms a local attack via a symlink; no exploit details or affected versions are provided. The provided documents...
CVE-2001-0384
ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file...
CVE-2001-0406
Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using 1 a printer queue query, 2 the more command in smbclient, or 3 the mput command in smbclient...
CVE-2001-0417
Kerberos 4 aka krb4 allows local users to overwrite arbitrary files via a symlink attack on new ticket files...
CVE-2001-0417
The CVE-2001-0417 entry concerns Kerberos 4 (krb4) where local users can overwrite arbitrary files via a symlink attack on new ticket files. The connected records corroborate a local-privilege impact vector with a partial integrity impact, and a low overall CVSS score (2.1/10, AV:L/AC:L/Au:N/I:P/...
[SRT2001-10] - scoadmin /tmp issues
====================================================================== Strategic Reconnaissance Team Security AdvisorySRT2001-10 Topic: scoadmin /tmp issues Vendor: Santa Cruz Operations Release Date: 05/07/01 ====================================================================== .: Description...
CVE-2001-1346
Computer Associates ARCserveIT 6.61 and 6.63 also called ARCservIT allows local users to overwrite arbitrary files via a symlink attack on the temporary files 1 asagent.tmp or 2 inetd.tmp...
Security Advisories
TurboLinux Security Announcement Package: dialog Vulnerable Packages: All Turbolinux versions previous to 0.9a-2 Date: 05/03/2001 5:00 PDT Affected TurboLinux platforms: TL Server 6.5, TL Workstation 6.1 Turbolinux versions 6.0.5 and earlier TurboLinux Advisory ID: TLSA2001006 Credits: Reported b...
[SECURITY] [DSA-048-3] samba security fix update
Package : samba Problem type : local symlink attack Debian-specific: no Marc Jacobsen from HP discovered that the security fixes from samba 2.0.8 did not fully fix the /tmp symlink attack problem. The samba team released version 2.0.9 to fix that, and those fixes have been added to version...
[SECURITY] [DSA-056-1] man-db local exploit
Package : man-db Problem type : local file overwrite Debian-specific: no Ethan Benson found a bug in man-db packages as distributed in Debian/GNU/Linux 2.2. man-db includes a mandb tool which is used to build an index of the manual pages installed on a system. When the -u or - -c option were give...