4071 matches found
OpenOffice.org <= 2.4.1 senddoc Insecure Temporary File Creation Vulnerability - Linux
OpenOffice.org is prone to an insecure temporary file creation vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Design/Logic Flaw
master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file. NOTE: the vendor disputes this vulnerability, stating 'this package does not have " possibility of attack with the help of symlinks"'...
CVE-2008-5034
master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file. NOTE: the vendor disputes this vulnerability, stating 'this package does not have " possibility of attack with the help of symlinks"'...
DEBIAN-CVE-2008-5007
createlazarusexporttgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a 1 /tmp/lazarus.tgz temporary file or a 2 /tmp/lazarus temporary directory...
Directory traversal
createlazarusexporttgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a 1 /tmp/lazarus.tgz temporary file or a 2 /tmp/lazarus temporary directory...
PT-2008-6188 · Unknown · Printfilters-Ppd
Name of the Vulnerable Software and Affected Versions: printfilters-ppd version 2.13 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file. The vendor disputes this issue, stating that the package does not have the...
CVE-2008-4998
postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid...
DEBIAN-CVE-2008-4996
init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor disputes this vulnerability, stating that "init is used in a single-user context; there's no possibility that this is exploitable...
CVE-2008-4994
The 1 ncsarmt and 2 ncsawrap scripts in xmcd 2.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.pid temporary file...
CVE-2008-4997
dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. NOTE: the vendor disputes this vulnerability, stating that the vector is solely "an EXAMPLE used in the manpage...
Arbitrary file deletion
qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file...
Arbitrary file deletion
The 1 ncsarmt and 2 ncsawrap scripts in xmcd 2.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.pid temporary file...
CVE-2008-4998
postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid...
CVE-2008-4995
redirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/redirect.log temporary file. NOTE: this vulnerability is only limited to debug mode, which is disabled by default...
CVE-2008-4998
postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid...
CVE-2008-4994
The 1 ncsarmt and 2 ncsawrap scripts in xmcd 2.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.pid temporary file...
CVE-2008-4996
The CVE-2008-4996 entry concerns initramfs-tools 0.92f, where a symlink attack on the /tmp/initramfs.debug file could allow local users to overwrite arbitrary files. The description notes that this vulnerability is disputed by the vendor, which says init is used in a single-user context and that ...
PT-2008-6168 · Twiki · Twiki
Name of the Vulnerable Software and Affected Versions: twiki version 4.1.2 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. The vendor disputes this issue, stating it is invalid. Recommendations: For twiki version 4.1.2,...
PT-2008-6166 · Canonical +1 · Initramfs-Tools +1
Name of the Vulnerable Software and Affected Versions: initramfs-tools version 0.92f Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. The vendor disputes this, stating that init is used in a single-user context...