[SA13758] iproute2 netbug Script Insecure Temporary File Creation

TITLE: iproute2 netbug Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13758 VERIFY ADVISORY: http://secunia.com/advisories/13758/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: iproute2 2.x http://secunia.com/product/4495/ DESCRIPTION: Javier...

[SA13725] Apache mod_dosevasive Insecure Temporary File Creation

TITLE: Apache moddosevasive Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13725 VERIFY ADVISORY: http://secunia.com/advisories/13725/ CRITICAL: Not critical IMPACT: Manipulation of data, Privilege escalation WHERE: Local system SOFTWARE: moddosevasive 1.x module for Apache...

[SA13679] aStats Insecure Temporary File Creation

TITLE: aStats Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13679 VERIFY ADVISORY: http://secunia.com/advisories/13679/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: aStats 1.x http://secunia.com/product/4465/ DESCRIPTION: Javier Fernбndez-Sanguino...

[SA13640] LPRng "lprng_certs.sh" Script Insecure Temporary File Creation

TITLE: LPRng "lprngcerts.sh" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13640 VERIFY ADVISORY: http://secunia.com/advisories/13640/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: LPRng 3.x http://secunia.com/product/4454/ DESCRIPTION: Javier...

[ GLSA 200411-17 ] mtink: Insecure tempfile handling

Gentoo Linux Security Advisory GLSA 200411-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[ GLSA 200411-13 ] Portage, Gentoolkit: Temporary file vulnerabilities

Gentoo Linux Security Advisory GLSA 200411-13:01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...

USN-5-1: gettext vulnerabilities

Recently, Trustix Secure Linux discovered some vulnerabilities in the gettext package. The programs "autopoint" and "gettextize" created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program...

[SA12976] Netatalk "etc2ps.sh" Script Insecure Temporary File Creation

TITLE: Netatalk "etc2ps.sh" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA12976 VERIFY ADVISORY: http://secunia.com/advisories/12976/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Netatalk 2.x http://secunia.com/product/4147/ Netatalk 1.x...

[SA12973] OpenSSL "der_chop" Script Insecure Temporary File Creation

TITLE: OpenSSL "derchop" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA12973 VERIFY ADVISORY: http://secunia.com/advisories/12973/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: OpenSSL 0.9.x http://secunia.com/product/253/ DESCRIPTION: A...

Debian DSA-023-1 : inn2 - local tempfile vulnerabilities

People at WireX have found several potential insecure uses of temporary files in programs provided by INN2. Some of them only lead to a vulnerability to symlink attacks if the temporary directory was set to /tmp or /var/tmp, which is the case in many installations, at least in Debian packages. An...

[SA12476] Net-Acct Insecure Temporary File Creation Vulnerability

TITLE: Net-Acct Insecure Temporary File Creation Vulnerability SECUNIA ADVISORY ID: SA12476 VERIFY ADVISORY: http://secunia.com/advisories/12476/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Net-Acct 0.x http://secunia.com/product/3875/ DESCRIPTION: Stefan...

CVE-2004-0107

The 1 post and 2 trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108...

security flaw

The 1 post and 2 trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108...

[local problems] eTrust Virus Protection 6.0 InoculateIT for linux

author: l0om [email protected] software: eTrust Virus Protection 6.0 InoculateIT for linux local phun with etrust antivirus 6.0 inoculateIT linux eTrust InnoculateIT 6.0 comes for the following OSes: -windows 95/98/ME -windows nt 4.0/2000 -novell netware 3.x 4.x 5.x -lotus notes/domino -mircosoft...

OpenServer 5.0.5 : Insecure creation of files in /tmp

To: [email protected] [email protected] [email protected] etsys.com -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SCO Security Advisory Subject: OpenServer 5.0.5 : Insecure creation of files in /tmp Advisory number: CSSA-2003-SCO.27 Issue date: 2003 October 20 Cross...

CVE-2001-0890

The CVE-2001-0890 entry describes a vulnerability in backend drivers of the SANE library (1.0.3 and earlier), used by frontend tools such as XSane, where a local user can modify files via a symlink attack on temporary files. The root cause is a symlink-related flaw in temporary file handling with...

CVE-2001-0119

gettyps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack...

SuSE Linux 6.16.2 - cwdtools Local Overflow Local Privilege Escalation

SuSE Linux 6.16.2 - cwdtools Local Overflow Local Privilege Escalation ! /bin/sh source: https://www.securityfocus.com/bid/738/info cdwtools is a package of utilities for cd-writing. The linux version of these utilities, which ships with S.u.S.E linux 6.1 and 6.2, is vulnerable to several local...

sshd-DoS.txt

Date: Sun, 6 Sep 1998 00:53:24 +0200 From: Michal Zalewski To: [email protected] Subject: Sendmail, lynx, Netscape, sshd, Linux kernel twice Maybe some sshd 1.x/2.0 stupidities: ------------------------------------ Unprivledged luser could create symlink in /.ssh or /.sshd to virtually any fil...

IBM AIX 4.2.1 - snap Insecure Temporary File Creation

IBM AIX 4.2.1 - snap Insecure Temporary File Creation source: https://www.securityfocus.com/bid/375/info The snap command is a diagnostic utlitiy for gathering system information on AIX platforms. It can only be executed by root, but it copies various system files into /tmp/ibmsupt/ under...