830 matches found
CVE-2005-1064
The copysymlink function in rsnapshot 1.2.0 and 1.1.x before 1.1.7 changes the ownership of files that a symlink points to rather than the symlink itself, which allows local users to obtain access to arbitrary files...
CVE-2005-0004
The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files...
Debian DSA-633-1 : bmv - insecure temporary file
Peter Samuelson, upstream maintainer of bmv, a PostScript viewer for SVGAlib, discovered that temporary files are created in an insecure fashion. A malicious local user could cause arbitrary files to be overwritten by a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
[SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 577-1 [email protected] http://www.debian.org/security/ Martin Schulze October 29th, 2004 http://www.debian.org/security/faq -...
Debian DSA-108-1 : wmtv - symlink vulnerability
Nicolas Boullis found some security problems in the wmtv package a dockable video4linux TV player for windowmaker which is distributed in Debian GNU/Linux 2.2. With the current version of wmtv, the configuration file is written back as the superuser, and without any further checks. A malicious us...
Debian DSA-539-1 : kdelibs - temporary directory vulnerability
The SUSE security team was alerted that in some cases the integrity of symlinks used by KDE are not ensured and that these symlinks can be pointing to stale locations. This can be abused by a local attacker to create or truncate arbitrary files or to prevent KDE applications from functioning...
[SECURITY] [DSA 553-1] New getmail packages fix root compromise
-------------------------------------------------------------------------- Debian Security Advisory DSA 553-1 [email protected] http://www.debian.org/security/ Martin Schulze September 27th, 2004 http://www.debian.org/security/faq -...
[SECURITY] [DSA 553-1] New getmail packages fix root compromise
-------------------------------------------------------------------------- Debian Security Advisory DSA 553-1 [email protected] http://www.debian.org/security/ Martin Schulze September 27th, 2004 http://www.debian.org/security/faq -...
DSA-553-1 getmail - symlink vulnerability
Bulletin has no description...
getmail -- symlink vulnerability during maildir delivery
David Watson reports a symlink vulnerability in getmail. If run as root not the recommended mode of operation, a local user may be able to cause getmail to write files in arbitrary directories via a symlink attack on subdirectories of the maildir...
AIX 5.1 : IY55790
The remote host is missing AIX Critical Security Patch number IY55790 SECURITY: Symlink vulnerability in console commands. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
AIX 5.2 : IY55789
The remote host is missing AIX Critical Security Patch number IY55789 SECURITY: Symlink vulnerability in console commands. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...
Debian proftpd root Privilege Escalation
Binary data 1817.prm...
[SECURITY] [DSA 539-1] New kdelibs packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 539-1 [email protected] http://www.debian.org/security/ Martin Schulze August 17th, 2004 http://www.debian.org/security/faq -...
Mandrake Linux Security Advisory : ispell (MDKSA-2001:058)
The ispell program uses mktemp to open temporary files. This makes it vulnerable to symlink attacks. The program now has a patch from OpenBSD applied that uses mkstemp instead, and switches gets to fgets for dealing with user input. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
Mandrake Linux Security Advisory : ksymoops (MDKSA-2004:060)
Geoffrey Lee discovered a problem with the ksymoops-gznm script distributed with Mandrakelinux. The script fails to do proper checking when copying a file to the /tmp directory. Because of this, a local attacker can setup a symlink to point to a file that they do not have permission to remove. Th...
CVE-2004-0698
4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack...
RHEL 2.1 / 3 : utempter (RHSA-2004:174)
An updated utempter package that fixes a potential symlink vulnerability is now available. Utempter is a utility that allows terminal applications such as xterm and screen to update utmp and wtmp without requiring root privileges. Steve Grubb discovered a flaw in Utempter which allowed device nam...
Esearch: Insecure temp file handling
Background Esearch is a replacement for the Portage command "emerge search". It uses an index to speed up searching of the Portage tree. Description The eupdatedb utility uses a temporary file /tmp/esearchdb.py.tmp to indicate that the eupdatedb process is running. When run, eupdatedb checks to s...
