Debian DSA-658-1 : libdbi-perl - insecure temporary file

Javier Fernandez-Sanguino Pena from the Debian Security Audit Project discovered that the DBI library, the Perl5 database interface, creates a temporary PID file in an insecure manner. This can be exploited by a malicious user to overwrite arbitrary files owned by the person executing the parts o...

FireHOL Linux firewall builder symbolic links problem

Symbolic links problem on temporary files creation...

MySQL: Insecure temporary file creation

Background MySQL is a fast, multi-threaded, multi-user SQL database server. Description Javier Fernandez-Sanguino Pena from the Debian Security Audit Project discovered that the 'mysqlaccess' script creates temporary files in world-writeable directories with predictable names. Impact A local...

teTeX, pTeX, CSTeX: Multiple vulnerabilities

Background teTeX is a complete and open source TeX distribution. CSTeX is another TeX distribution including Czech and Slovak support. pTeX is another alternative that allows Japanese publishing with TeX. xdvizilla is an auxiliary script used to integrate DVI file viewing in Mozilla-based browser...

CVE-2005-0004

The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files...

[SECURITY] [DSA 647-1] New mysql packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 647-1 [email protected] http://www.debian.org/security/ Martin Schulze January 19th, 2005 http://www.debian.org/security/faq -...

DSA-647-1 mysql - insecure temporary files

Bulletin has no description...

RHEL 2.1 / 3 : krb5 (RHSA-2005:012)

Updated Kerberos krb5 packages that correct buffer overflow and temporary file bugs are now available for Red Hat Enterprise Linux. Kerberos is a networked authentication system that uses a trusted third party a KDC to authenticate clients and servers to each other. A heap based buffer overflow b...

bmv PostScript viewer symbolic links problem

Symbolic links problem on temporary files creation...

[SECURITY] [DSA 633-1] New bmv package fixes insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 633-1 [email protected] http://www.debian.org/security/ Martin Schulze January 11th, 2005 http://www.debian.org/security/faq -...

mysql-scripts -- mysqlaccess insecure temporary file creation

The Debian Security Team reports: Javier Fernández-Sanguino Peña from the Debian Security Audit Project discovered a temporary file vulnerability in the mysqlaccess script of MySQL that could allow an unprivileged user to let root overwrite arbitrary files via a symlink attack and could also coul...

[SECURITY] [DSA 633-1] New bmv package fixes insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 633-1 [email protected] http://www.debian.org/security/ Martin Schulze January 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 633-1] New bmv package fixes insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 633-1 [email protected] http://www.debian.org/security/ Martin Schulze January 11th, 2005 http://www.debian.org/security/faq -...

CVE-2004-0996

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack...

DEBIAN-CVE-2004-1110

The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file...

CVE-2004-1336

The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack...

[SA13693] GRASS Multiple Scripts Insecure Temporary File Creation

TITLE: GRASS Multiple Scripts Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13693 VERIFY ADVISORY: http://secunia.com/advisories/13693/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: GRASS 5.7.x http://secunia.com/product/4471/ DESCRIPTION: Javier...

Mozilla, Firefox, Thunderbird: Various vulnerabilities

Background Mozilla is a popular web browser that includes a mail and newsreader. Mozilla Firefox and Mozilla Thunderbird are respectively the next-generation browser and mail client from the Mozilla project. Description Maurycy Prodeus from isec.pl found a potentially exploitable buffer overflow ...

mod_dosevasive -- insecure temporary file creation

An LSS Security Advisory reports: When a denial of service attack is detected, moddosevasive will, among other things, create a temporary file which it will use to trace actions from the offensive IP address. This file is insecurely created in /tmp and it's name is easily predictable. It is then...

[SA13679] aStats Insecure Temporary File Creation

TITLE: aStats Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13679 VERIFY ADVISORY: http://secunia.com/advisories/13679/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: aStats 1.x http://secunia.com/product/4465/ DESCRIPTION: Javier Fernбndez-Sanguino...