rpi-update symlink vulnerability

Unsafe temp file creation...

Mandrake Linux Security Advisory : cups (MDKSA-2001:023)

A number of problems were found by the SuSE security team recently during an internal audit of the CUPS printing package. These problems have been resolved with the latest CUPS release which include temp file creation vulnerabilities, potential buffer overflows, and other security enhancements. I...

Another Solaris 10 Patch Cluster Symlink Attack

Larry W. Cashdollar 8/6/2012 Here is another symlink attack with temp file creation using process id in Solaris 10 patch cluster. You can over write the contents of root owned files with the contents of inetd.conf. In patches/137097-01/SUNWcsr/reloc/lib/svc/method/inetd-upgrade lines : 72...

Fedora 16 : puppet-2.6.6-3.fc16 (2011-13623)

The following vulnerabilities have been discovered and fixed : - CVE-2011-3870, a symlink attack via a user's SSH authorizedkeys file - CVE-2011-3869, a symlink attack via a user's .k5login file - CVE-2011-3871, a privilege escalation attack via the temp file used by the puppet resource applicati...

CVE-2009-5082

The 1 configure and 2 config.guess scripts in GNU troff aka groff 1.20.1 on Openwall GNU//Linux aka Owl improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file...

Apple 10.6.3 chpass BSD Insecure Temp File Creating In /etc

!/bin/sh Apple private/etc fantastics-macbook: fantastic$ ./prdelka-vs-APPLE-chpass.sh Apple /etc/I.HAX.9GrrKm fantastics-macbook: fantastic$ cat /etc/I.HAX.9GrrKm Turtle power -- prdelka cat evil.c include include int mainint ar...

Firefox 3.5.3 local download manager temp file creation

Exploit for unknown platform in category local exploits ======================================================= Firefox 3.5.3 local download manager temp file creation ======================================================= Title: Firefox 3.5.3 local download manager temp file creation CVE-ID:...

SuSE9 Security Update : pam_mount (YOU Patch Number 12332)

This update fixes the temp-flle handling in the passwdehd script that allowed a symlink attack. CVE-2008-5138 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE 10 Security Update : pam_mount (ZYPP Patch Number 5911)

This update fixes the temp-flle handling in the passwdehd script that allowed a symlink attack. CVE-2008-5138 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE9 Security Update : perl-DBI (YOU Patch Number 9838)

This update fixes insecure temp. file handling. CVE-2005-0077 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41346; scriptversion"1.9";...

openSUSE Security Update : pam_mount (pam_mount-427)

This update fixes the temp-flle handling in the passwdehd script that allowed a symlink attack. CVE-2008-5138 script was disabled for 11.0 and 11.1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

openSUSE Security Update : pam_mount (pam_mount-427)

This update fixes the temp-flle handling in the passwdehd script that allowed a symlink attack. CVE-2008-5138 script was disabled for 11.0 and 11.1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

Openswan 2.4.12/2.6.16 - Insecure Temp File Creation Privilege Escalation

!/bin/bash uglyswan - OpenSwan local root exploit CVE-2008-4190 description: The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the 1 ipseclive.conn and 2...

openSUSE 10 Security Update : pam_mount (pam_mount-5916)

This update fixes the temp-flle handling in the passwdehd script that allowed a symlink attack. CVE-2008-5138 script was disabled for 11.0 and 11.1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

Debian DSA-1676-1 : flamethrower - insecure temp file generation

Dmitry E. Oboukhov discovered that flamethrower creates predictable temporary filenames, which may lead to a local denial of service through a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

[SECURITY] [DSA 1676-1] New flamethrower packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1676-1 [email protected] http://www.debian.org/security/ dann frazier December 01, 2008 http://www.debian.org/security/faq -...

Debian DSA-1674-1 : jailer - insecure temp file generation

Javier Fernandez-Sanguino Pena discovered that updatejail, a component of the chroot maintenance tool Jailer, creates a predictable temporary file name, which may lead to local denial of service through a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

[SECURITY] [DSA 1674-1] New jailer packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1674-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 30, 2008 http://www.debian.org/security/faq -...

DEBIAN-CVE-2008-4908

maps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

[SECURITY] [DSA 1643-1] New feta packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1643-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 05, 2008 http://www.debian.org/security/faq -...