3506 matches found
CVE-2008-5910
The CVE-2008-5910 entry concerns an unspecified vulnerability in txzonemgr of Sun OpenSolaris, described as a “Temporary file vulnerability.” Affected component: txzonemgr, Sun OpenSolaris. Root cause and impact are not fully detailed beyond “unknown impact” in the description, with the vulnerabi...
CVE-2009-0167
Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv61 through snv106 allows local users to cause a denial of service via unspecified vectors, related to enumeration of "wrong printers," aka a "Temporary file vulnerability."...
CVE-2008-5908
Unspecified vulnerability in the root/boot archive tool in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Temporary file vulnerability," aka Bug ID 6653455...
CVE-2008-5908
CVE-2008-5908 concerns an unspecified vulnerability in the root/boot archive tool of Sun OpenSolaris, tied to a “Temporary file vulnerability” (Bug ID 6653455). Available sources indicate unknown impact and local attack vectors, with no concrete exploit details provided in the connected documents...
MKPortal 1.2.1 - modulesblogindex.php Home Template Textarea SQL Injection
MKPortal 1.2.1 - modulesblogindex.php Home Template Textarea SQL Injection source: https://www.securityfocus.com/bid/33300/info MKPortal is prone to multiple security vulnerabilities, including SQL-injection, HTML-injection, cross-site scripting, arbitrary-file-upload, and...
GLSA-200901-02 : JHead: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200901-02 JHead: Multiple vulnerabilities Marc Merlin and John Dong reported multiple vulnerabilities in JHead: A buffer overflow in the DoCommand function when processing the cmd argument and related to potential string overflows...
JHead: Multiple vulnerabilities
Background JHead is an exif jpeg header manipulation tool. Description Marc Merlin and John Dong reported multiple vulnerabilities in JHead: A buffer overflow in the DoCommand function when processing the cmd argument and related to potential string overflows CVE-2008-4575. An insecure creation o...
xen security update
CentOS Errata and Security Advisory CESA-2009:0003 Updated xen packages that resolve several security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The xen packages contain th...
xen: insecure temporary file use in qemu-dm.debug
qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file...
Moderate: Red Hat Security Advisory: xen security and bug fix update
Updated xen packages that resolve several security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The xen packages contain the Xen tools and management daemons needed to manage...
Gentoo Security Advisory GLSA 200812-22 (ampache)
The remote host is missing updates announced in advisory GLSA 200812-22. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
FreeBSD : ampache -- insecure temporary file usage (0ac68e68-d32b-11dd-b540-d1288664c17e)
Secunia reports : A security issue has been reported in Ampache, which can be exploited by malicious, local users to perform certain actions with escalated privileges. The security issue is caused due to the 'gather-messages.sh' script handling temporary files in an insecure manner. This can be...
Gentoo Security Advisory GLSA 200812-14 (aview)
The remote host is missing updates announced in advisory GLSA 200812-14. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200812-12 (honeyd)
The remote host is missing updates announced in advisory GLSA 200812-12. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200812-14 (aview)
The remote host is missing updates announced in advisory GLSA 200812-14. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200812-12 (honeyd)
The remote host is missing updates announced in advisory GLSA 200812-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Ampache: Insecure temporary file usage
Background Ampache is a PHP based tool for managing, updating and playing audio files via a web interface. Description Dmitry E. Oboukhov reported an insecure temporary file usage within the gather-messages.sh script. Impact A local attacker could perform symlink attacks to overwrite arbitrary...
Code injection
gpsdrive aka gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/.smswatch or b /tmp/gpsdrivepos temporary file, related to 1 examples/gpssmswatch and 2 src/splash.c, different vectors than CVE-2008-4959 and CVE-2008-5380...
CVE-2008-5706
The cTrigger::DoIt function in src/ctrigger.cpp in the trigger mechanism in the daemon in Verlihub 0.9.8d-RC2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/trigger.tmp temporary file...
CUPS < 1.3.8-4 - Local Privilege Escalation
/ cve-2008-5377.c CUPS http://jon.oberheide.org Usage: $ gcc cve-2008-5377.c -o cve-2008-5377.c $ ./cve-2008-5377 $ id uid=0root gid=1000vm ... Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-5377 pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a...