GLSA-200506-13 : webapp-config: Insecure temporary file handling

The remote host is affected by the vulnerability described in GLSA-200506-13 webapp-config: Insecure temporary file handling Eric Romang discovered webapp-config uses a predictable temporary filename while processing certain options, resulting in a race condition. Impact : Successful exploitation...

GLSA-200506-10 : LutelWall: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200506-10 LutelWall: Insecure temporary file creation Eric Romang has discovered that the newversioncheck function in LutelWall insecurely creates a temporary file when updating to a new version. Impact : A local attacker could...

LutelWall: Insecure temporary file creation

Background LutelWall is a high-level Linux firewall configuration tool. Description Eric Romang has discovered that the newversioncheck function in LutelWall insecurely creates a temporary file when updating to a new version. Impact A local attacker could create symbolic links in the temporary fi...

GLSA-200506-08 : GNU shtool, ocaml-mysql: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200506-08 GNU shtool, ocaml-mysql: Insecure temporary file creation Eric Romang has discovered that GNU shtool insecurely creates temporary files with predictable filenames CAN-2005-1751. On closer inspection, Gentoo Security...

CVE-2005-1879

LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget...

CVE-2005-1880

everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget...

CVE-2005-1879

CVE-2005-1879 concerns LutelWall 0.97 and earlier. The vulnerability allows a local attacker to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget. OpenVAS and Gentoo GLSA entries describe an insecure temporary file creation during version updates,...

[Full-disclosure] everybuddy <= 0.4.3 insecure temporary file creation

everybuddy insecure temporary file creation Vendor: http://www.everybuddy.com/ no more vendor URL Advisory: http://www.zataz.net/adviso/everybuddy-06062005.txt Vendor informed: no more vendor Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary file...

[Full-disclosure] LutelWall <= 0.97 insecure temporary file creation

LutelWall insecure temporary file creation Vendor: http://firewall.lutel.pl/index.php Advisory: http://www.zataz.net/adviso/lutelwall-05222005.txt Vendor informed: yes Exploit available: yes Impact : medium Exploitation : low The vulnerability is caused due to temporary file being created...

[Full-disclosure] GIPTables Firewall <= v1.1 insecure temporary file creation

GIPTables Firewall insecure temporary file creation Vendor: http://www.giptables.org/ Advisory: http://www.zataz.net/adviso/giptables-05222005.txt Vendor informed: yes Exploit available: yes Impact : medium Exploitation : low The vulnerability is caused due to temporary file being created...

openssl, openssl095a, openssl096 security update

CentOS Errata and Security Advisory CESA-2005:476-01 Updated OpenSSL packages that fix security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and...

GLSA-200505-18 : Net-SNMP: fixproc insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200505-18 Net-SNMP: fixproc insecure temporary file creation The fixproc application of Net-SNMP creates temporary files with predictable filenames. Impact : A malicious local attacker could exploit a race condition to change the...

shtool insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 shtool insecure temporary file creation Vendor: http://www.gnu.org/software/shtool/ Advisory: http://www.zataz.net/adviso/shtool-05252005.txt Vendor informed: no more vendor Exploit available: yes Impact : low Exploitation : low shtool contain a...

DEBIAN-CVE-2005-1751

Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary file, a different vulnerability than CVE-2005-1759...

webapp-config-05182005.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Gentoo webapp-config insecure temporary file creation Vendor: http://www.gentoo.org Advisory: http://www.zataz.net/adviso/webapp-config-05182005.txt Vendor informed: yes Exploit available: yes Impact : high Exploitation : low Gentoo webapp-config...

Fedora Core 2 : kdelibs-3.2.2-14.FC2 (2005-244)

Wed Mar 2 2005 Than Ngo 6:3.2.2-14.FC2 - Applied patch to fix DCOP DoS, CVE-2005-0396, 150090 thanks KDE security team - Wed Feb 16 2005 Than Ngo 3.2.2-13.FC2 - Applied patch to fix dcopidlng insecure temporary file usage, CVE-2005-0365, 148823 Note that Tenable Network Security has extracted the...

GLSA-200504-25 : Rootkit Hunter: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200504-25 Rootkit Hunter: Insecure temporary file creation Sune Kloppenborg Jeppesen and Tavis Ormandy of the Gentoo Linux Security Team have reported that the checkupdate.sh script and the main rkhunter script insecurely creates...

cvs, sharutils security update

CentOS Errata and Security Advisory CESA-2005:377 An updated sharutils package is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The sharutils package contains a set of tools for encoding and decoding packages of files in binary or...

rkhunter -- insecure temporary file creation

Gentoo reports: Sune Kloppenborg Jeppesen and Tavis Ormandy of the Gentoo Linux Security Team have reported that the checkupdate.sh script and the main rkhunter script insecurely creates several temporary files with predictable filenames. A local attacker could create symbolic links in the...

Rootkit Hunter: Insecure temporary file creation

Background Rootkit Hunter is a scanning tool to detect rootkits, backdoors and local exploits on a local machine. Rootkit Hunter uses downloaded data files to check file integrity. These files are updated via the checkupdate.sh script. Description Sune Kloppenborg Jeppesen and Tavis Ormandy of th...