723 matches found
CVE-2011-2924
CVE-2011-2924 affects the foomatic-rip filter (v4.0.12 and earlier). The flaw arises from insecure temporary file handling when rendering PostScript data in debug mode, enabling a local attacker to perform symlink attacks to overwrite arbitrary files accessible to the user running the foomatic-ri...
CVE-2011-2923
foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges ...
CVE-2011-2923
foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges ...
Design/Logic Flaw
foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges ...
CVE-2011-2923
CVE-2011-2923 concerns the foomatic-rip filter (all versions) where insecure use of temporary files for storage of PostScript data occurs when debug mode is enabled. The vulnerability stems from rendering the data with debug-enabled temporary files, which an attacker with local access can abuse t...
CVE-2011-2923
foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges ...
CVE-2011-2923
foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges ...
Updated cpio packages fix security vulnerabilities
in cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive CVE-2015-1197. Thomas Habets discovered that GNU cpio incorrectly handled certain inputs. An attacker could possibly use this issue to privilege...
CVE-2013-1809
Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...
CVE-2013-1809
Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...
Design/Logic Flaw
Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...
CVE-2013-1809
CVE-2013-1809 affects Gambas before 3.4.0. The issue arises from insecure temporary directories, allowing remote attackers to move or manipulate directory contents or perform symlink attacks. This is documented across multiple sources (NVD entry and related advisories). The provided materials des...
CVE-2013-1809
Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...
PT-2019-6854
Name of the Vulnerable Software and Affected Versions Gambas versions prior to 3.4.0 Description The issue allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories. Recommendations For versions prior to 3.4.0...
CVE-2011-1408
ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...
CVE-2011-1408
ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...
CVE-2011-1408
ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...
Code injection
ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...
CVE-2011-1408
The CVE-2011-1408 entry applies to ikiwiki prior to version 3.20110608. The vulnerability enables remote attackers to hijack the root user’s tty and perform symlink attacks. From the description, the attack is remote and does not require authentication, with network access identified as the attac...
