Design/Logic Flaw

guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.PID temporary file...

CVE-2007-5207

guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.PID temporary file...

CVE-2007-5207

guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.PID temporary file...

FreeBSD : id3lib -- insecure temporary file creation (15ec9123-7061-11dc-b372-001921ab2fa4)

Debian Bug report log reports : When tagging file $foo, a temporary copy of the file is created, and for some reason, libid3 doesn't use mkstemp but just creates $foo.XXXXXX literally, without any checking. This would silently truncate and overwrite an existing $foo.XXXXXX. %NASLMINLEVEL 70300 C...

CVE-2007-3916

The main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete arbitrary files via a symlink attack on a skkdic$PID temporary file...

DEBIAN-CVE-2007-3916

The main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete arbitrary files via a symlink attack on a skkdic$PID temporary file...

CVE-2007-3916

The main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete arbitrary files via a symlink attack on a skkdic$PID temporary file...

CVE-2007-3916

The main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete arbitrary files via a symlink attack on a skkdic$PID temporary file...

GLSA-200709-04 : po4a: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200709-04 po4a: Insecure temporary file creation The po4a development team reported a race condition in the gettextize function when creating the file '/tmp/gettextization.failed.po'. Impact : A local attacker could perform a...

GLSA-200709-08 : id3lib: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200709-08 id3lib: Insecure temporary file creation Nikolaus Schulz discovered that the function RenderV2ToFile in file src/tagfile.cpp creates temporary files in an insecure manner. Impact : A local attacker could exploit this...

Sysstat不安全临时文件建立漏洞

Sysstat是一款Linux下的系统统计工具。 Sysstat不正确处理/tmp/sysstat.run脚本，本地攻击者可以利用漏洞进行拒绝服务攻击。 通过符号链接，可导致破坏系统敏感文件造成拒绝服务攻击。 Sysstat Sysstat 7.1.6 Gentoo Linux 可参考如下安全公告获得补丁信息： https://bugs.gentoo.org/showbug.cgi?id=188808...

irc/bitchx -- multiple vulnerabilities

bannedit reports: Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the pmode variable. Nico Golde reports: There is a security issue in ircii-pana in bitchx' hostname command. The ehostname function...

DEBIAN-CVE-2007-4460

The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...

Design/Logic Flaw

The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...

CVE-2007-4460

The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...

CVE-2007-4460

The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...

CVE-2007-4460

The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...

Design/Logic Flaw

The setdefaultspeeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvclock temporary file...

CVE-2007-3531

The setdefaultspeeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvclock temporary file...

[Full-disclosure] [ GLSA 200707-08 ] NVClock: Insecure file usage

Gentoo Linux Security Advisory GLSA 200707-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...