DSA-704-1 remstats - tempfile, missing input sanitising

Bulletin has no description...

DSA-679-1 toolchain-source - insecure temporary files

Bulletin has no description...

Mandrake Linux Security Advisory : perl (MDKSA-2005:031)

Jeroen van Wolffelaar discovered that the rmtree function in the perl File::Path module would remove directories in an insecure manner which could lead to the removal of arbitrary files and directories via a symlink attack CVE-2004-0452. Trustix developers discovered several insecure uses of...

DEBIAN-CVE-2004-0966

The 1 autopoint and 2 gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

[SA13970] FireHOL Insecure Temporary File Creation Vulnerabilities

TITLE: FireHOL Insecure Temporary File Creation Vulnerabilities SECUNIA ADVISORY ID: SA13970 VERIFY ADVISORY: http://secunia.com/advisories/13970/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: FireHOL 1.x http://secunia.com/product/4556/ DESCRIPTION: Sam Coute...

[SA13933] Ghostscript Various Scripts Insecure Temporary File Creation

TITLE: Ghostscript Various Scripts Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13933 VERIFY ADVISORY: http://secunia.com/advisories/13933/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Ghostscript 8.x http://secunia.com/product/4550/ DESCRIPTION:...

[SA13758] iproute2 netbug Script Insecure Temporary File Creation

TITLE: iproute2 netbug Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13758 VERIFY ADVISORY: http://secunia.com/advisories/13758/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: iproute2 2.x http://secunia.com/product/4495/ DESCRIPTION: Javier...

[SA13725] Apache mod_dosevasive Insecure Temporary File Creation

TITLE: Apache moddosevasive Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13725 VERIFY ADVISORY: http://secunia.com/advisories/13725/ CRITICAL: Not critical IMPACT: Manipulation of data, Privilege escalation WHERE: Local system SOFTWARE: moddosevasive 1.x module for Apache...

[SA13679] aStats Insecure Temporary File Creation

TITLE: aStats Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13679 VERIFY ADVISORY: http://secunia.com/advisories/13679/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: aStats 1.x http://secunia.com/product/4465/ DESCRIPTION: Javier Fernбndez-Sanguino...

[SA13640] LPRng "lprng_certs.sh" Script Insecure Temporary File Creation

TITLE: LPRng "lprngcerts.sh" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13640 VERIFY ADVISORY: http://secunia.com/advisories/13640/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: LPRng 3.x http://secunia.com/product/4454/ DESCRIPTION: Javier...

[ GLSA 200411-17 ] mtink: Insecure tempfile handling

Gentoo Linux Security Advisory GLSA 200411-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[ GLSA 200411-13 ] Portage, Gentoolkit: Temporary file vulnerabilities

Gentoo Linux Security Advisory GLSA 200411-13:01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...

USN-5-1: gettext vulnerabilities

Recently, Trustix Secure Linux discovered some vulnerabilities in the gettext package. The programs "autopoint" and "gettextize" created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program...

[SA12976] Netatalk "etc2ps.sh" Script Insecure Temporary File Creation

TITLE: Netatalk "etc2ps.sh" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA12976 VERIFY ADVISORY: http://secunia.com/advisories/12976/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Netatalk 2.x http://secunia.com/product/4147/ Netatalk 1.x...

[SA12973] OpenSSL "der_chop" Script Insecure Temporary File Creation

TITLE: OpenSSL "derchop" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA12973 VERIFY ADVISORY: http://secunia.com/advisories/12973/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: OpenSSL 0.9.x http://secunia.com/product/253/ DESCRIPTION: A...

Debian DSA-023-1 : inn2 - local tempfile vulnerabilities

People at WireX have found several potential insecure uses of temporary files in programs provided by INN2. Some of them only lead to a vulnerability to symlink attacks if the temporary directory was set to /tmp or /var/tmp, which is the case in many installations, at least in Debian packages. An...

[SA12476] Net-Acct Insecure Temporary File Creation Vulnerability

TITLE: Net-Acct Insecure Temporary File Creation Vulnerability SECUNIA ADVISORY ID: SA12476 VERIFY ADVISORY: http://secunia.com/advisories/12476/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Net-Acct 0.x http://secunia.com/product/3875/ DESCRIPTION: Stefan...

CVE-2004-0107

The 1 post and 2 trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108...

security flaw

The 1 post and 2 trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108...

[local problems] eTrust Virus Protection 6.0 InoculateIT for linux

author: l0om [email protected] software: eTrust Virus Protection 6.0 InoculateIT for linux local phun with etrust antivirus 6.0 inoculateIT linux eTrust InnoculateIT 6.0 comes for the following OSes: -windows 95/98/ME -windows nt 4.0/2000 -novell netware 3.x 4.x 5.x -lotus notes/domino -mircosoft...