PT-2020-22721

Name of the Vulnerable Software and Affected Versions resource-agents affected versions not specified Description The issue is related to unsafe tempfile usage, which has been fixed. Additionally, problems where the ocfmon user was created with a default password have been addressed...

PT-2020-22719

Name of the Vulnerable Software and Affected Versions resource-agents affected versions not specified Description The issue is related to unsafe tempfile usage, which has been fixed. Additionally, problems with the ocfmon user being created with a default password have been addressed...

CVE-2008-7273

A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling...

Design/Logic Flaw

A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling...

CVE-2008-7273

A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling...

CVE-2008-7273

CVE-2008-7273 describes a symlink issue in Iceweasel-firegpg before 0.6 caused by insecure tempfile handling. Affected component is Iceweasel-firegpg; root cause is insecure tempfile handling leading to a symlink-related vulnerability. The CVSS data in the linked records indicates a local attack ...

PT-2019-6499

Name of the Vulnerable Software and Affected Versions Iceweasel-firegpg versions prior to 0.6 Description A symlink issue exists due to insecure tempfile handling. Recommendations For versions prior to 0.6, update to version 0.6 or later to resolve the issue...

CVE-2008-7273: Improper Link Resolution Before File Access

A symlink issue exists in Iceweasel-firegpg before 0.6 due to insecure tempfile handling...

CVE-2011-3618

atop: symlink attack possible due to insecure tempfile handling...

CVE-2011-3618

atop: symlink attack possible due to insecure tempfile handling...

DEBIAN-CVE-2011-3618

atop: symlink attack possible due to insecure tempfile handling...

CVE-2011-3618

atop: symlink attack possible due to insecure tempfile handling...

CVE-2011-3618

atop: symlink attack possible due to insecure tempfile handling...

CVE-2011-3618

CVE-2011-3618 relates to a symlink attack caused by insecure tempfile handling in the tool described as “atop.” The linked records (NVD, OSV, Debian/Ubuntu trackers and others) consistently cite this issue as a local‑attack vulnerability with insecure tempfile handling, leading to potential expos...

CVE-2011-3618

atop: symlink attack possible due to insecure tempfile handling...

PT-2019-6680

Name of the Vulnerable Software and Affected Versions atop affected versions not specified Description The issue is related to insecure tempfile handling, which allows for a symlink attack. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2011-3618: Improper Link Resolution Before File Access

atop: symlink attack possible due to insecure tempfile handling...

ruby: Unintentional file and directory creation with directory traversal in tempfile and tmpdir

It was found that the tmpdir and tempfile modules did not sanitize their file name argument. An attacker with control over the name could create temporary files and directories outside of the dedicated directory...

CVE-2018-17955 Static tempfile name allows overwriting of arbitrary files

In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection...

ruby: Unintentional file and directory creation with directory traversal in tempfile and tmpdir

It was found that the tmpdir and tempfile modules did not sanitize their file name argument. An attacker with control over the name could create temporary files and directories outside of the dedicated directory...