Дырка во многих реализациях PHP

Из-за того, что сервер не сбрасывает некоторые переменные, которые могут задаваться пользователем, пользователь может указать временный файл, используемый при загрузке, что позволяет скомпрометировать системные файлы...

AT Computing atsar_linux 1.4 - File Manipulation

source: https://www.securityfocus.com/bid/1048/info atsar is a linux load monitoring software package released under the GPL by AT Computing. atsadc is a setuid root binary that is included in the atsar package. atsadc is setuid because it obtains informatin via /dev/kmem. atsadc will accept as a...

[SECURITY] New versions of man2html fixes postinst glitch

Former versions of man2html uses a static file in /tmp for writing. This can lead into overwriting system files if a malicious user has created a symbolic link to it before upgrading man2html. We recommend you upgrade your man2html package as soon as possible. wget url will fetch the file for you...

aix.enetwork.firewall.txt

Date: Tue, 25 May 1999 20:33:53 +0100 From: Paul Cammidge To: [email protected] Subject: IBM eNetwork Firewall for AIX The IBM eNetwork Firewall for AIX contains some poorly written scripts, which create temporary files in /tmp without making any attempt to validate the existance of the file...

domino-notes.txt

''''''''''''''''''''''''''''''''''''' L0pht Security Advisory URL Origin: http://www.l0pht.com/advisories.html Release Date: July 31, 1998 Application: Notes 4.6+ Client Operating Sys: Any Severity: Users can overwrite/create system files Author: nny Patch Status: Lotus has been made aware of thi...