CVE-2008-5374

bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb.? temporary file, related to the 1 aliasconv.sh, 2 aliasconv.bash, and 3 cshtobash scripts...

CVE-2008-5376

editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.tag.tmp temporary file...

CVE-2008-5366

The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/probe-finished or 2 /tmp/ppp-errors temporary file...

GLSA-200812-08 : Mgetty: Insecure temporary file usage

The remote host is affected by the vulnerability described in GLSA-200812-08 Mgetty: Insecure temporary file usage Dmitry E. Oboukhov reported that the 'spooldir' directory in fax/faxspool.in is created in an insecure manner. Impact : A local attacker could exploit this vulnerability to overwrite...

Mgetty: Insecure temporary file usage

Background Mgetty is a set of fax and voice modem programs. Description Dmitry E. Oboukhov reported that the "spooldir" directory in fax/faxspool.in is created in an insecure manner. Impact A local attacker could exploit this vulnerability to overwrite arbitrary files with the privileges of the...

VirtualBox ipcdUnix.cpp创建不安全临时文件漏洞

BUGTRAQ ID: 32444 CVECAN ID: CVE-2008-5256 VirtualBox是由德国Innotek公司开发的开源虚拟化技术，目前已成为Sun xVM产品家族的成员。 VirtualBox的AcquireDaemonLock函数以不安全地方式使用临时文件，本地攻击者可以通过创建/tmp/.vbox-$USER-ipc/lock符号链接覆盖启动virtualbox用户所拥有的任意文件。开启然后退出virtualbox就足以触发这个漏洞，无需启动任何虚拟机。 Sun xVM VirtualBox 2.0.4 Sun ---...

DSA-1674-1 jailer - denial of service

Bulletin has no description...

CVE-2008-5256

The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file...

Design/Logic Flaw

The AcquireDaemonLock function in ipcdUnix.cpp in Sun Innotek VirtualBox before 2.0.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.vbox-$USER-ipc/lock temporary file...

verlihub -- insecure temporary file usage and arbitrary command execution

securityfocus reports: An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. Successfully mounting a symlink attack may allow the attacker to delete or corrupt sensitive files,...

Fedora 8 : geda-gnetlist-20080929-2.fc8 (2008-9694)

CVE-2008-5148 geda-gnetlist insecure temporary file use Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 9 : geda-gnetlist-20080929-2.fc9 (2008-9730)

CVE-2008-5148 geda-gnetlist insecure temporary file use Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2008-5136

tkusr in tkusr 0.82 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/tkusr.pgm temporary file...

CVE-2008-5146

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file...

DEBIAN-CVE-2008-5149

fwdcheck.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ temporary file...

DEBIAN-CVE-2008-5138

passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd. temporary file...

DEBIAN-CVE-2008-5141

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar. temporary file...

CVE-2008-5146

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file...

CVE-2008-5149

fwdcheck.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ temporary file...

CVE-2008-5140

trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/opr.ini. or 2 /tmp/lpt.zip temporary file...