3446 matches found
[SECURITY] [DSA 279-1] New metrics packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 279-1 [email protected] http://www.debian.org/security/ Martin Schulze April 7th, 2003 http://www.debian.org/security/faq -...
DSA-279 metrics - insecure temporary file creation
Paul Szabo and Matt Zimmerman discovered two similar problems in metrics, a tools for software metrics. Two scripts in this package, "halstead" and "gather\stats", open temporary files without taking appropriate security precautions. "halstead" is installed as a user program, while "gather\stats"...
CVE-2001-1383
initscript in setserial 2.17-4 and earlier uses predictable temporary file names, which could allow local users to conduct unauthorized operations on files...
CVE-2001-1059
VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information...
[SECURITY] [DSA 256-1] New mhc-utils packages fix predictable temporary file
-------------------------------------------------------------------------- Debian Security Advisory DSA 256-1 [email protected] http://www.debian.org/security/ Martin Schulze February 28th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA 256-1] New mhc-utils packages fix predictable temporary file
-------------------------------------------------------------------------- Debian Security Advisory DSA 256-1 [email protected] http://www.debian.org/security/ Martin Schulze February 28th, 2003 http://www.debian.org/security/faq -...
Low: Red Hat Security Advisory: im security update
Updated Internet Message packages are available that fix the insecure handling of temporary files. Updated 9 April 2003 Added packages for Red Hat Linux Advanced Workstation, Red Hat Enterprise Linux ES, and Red Hat Enterprise Linux WS. Internet Message IM consists of a set of user interface...
Information leakage via key file duplication during nCipher import
generatekey utility creates temporary PEM file and fails to delete it...
Low: Red Hat Security Advisory: python security update
An insecure use of a temporary file has been found in Python. Python is an interpreted, interactive, object-oriented programming language. Zack Weinberg discovered that os.execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names. This could allow local users t...
BitKeeper remote shell command execution/local vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: BitKeeper remote shell command execution/local vulnerability Product: BitKeeper http://www.bitkeeper.com Version: 3.0.x Author: Maurycy Prodeus [email protected] Date: 11 November 2002 Issue: - ------ BitKeeper is a source management software. It...
Multiple cgihtml vulnerabilities
Overview -------- cgihtml is a collection of routines for parsing World Wide Web WWW Common Gateway Interface CGI input and outputting HyperText Markup Language HTML. http://www.eekim.com/software/cgihtml/ According to the authors website, it has potentially been used in the implementation of...
DEBIAN-CVE-2002-2267
bogopass in bogofilter 0.9.0.4 allows local users to overwrite arbitrary files via a symlink attack on the bogopass temporary file...
tmpwatch attack
File name may be changed or deleted during temporary files removing process leaving possibility of symlink attack...
[SECURITY] [DSA 202-1] New IM packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 202-1 [email protected] http://www.debian.org/security/ Martin Schulze December 3rd, 2002 http://www.debian.org/security/faq -...
bogofilter contrib/bogopass temp file vulnerability
bogofilter-SA-2002:01.bogopass Topic: vulnerability in bogopass Announcement: bogofilter-SA-2002:01 Writer: Matthias Andree Version: 1.00 Announced: 2002-11-29 Category: contrib Type: temporary file created insecurely Impact: anonymous local file destruction or change Credits: - Danger: medium th...
Bogofilter symbolic links problem
file /tmp/bogopass.$$ is created without symbolic link check...
CVE-2002-0920
CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while modifying data, which could allow local users and possibly remote attackers to gain privileges by stealing the file before it has been processed...
Symbolic links in python
os.py execvpe method creates temporary file insecurely...
CVE-2002-0920
CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while modifying data, which could allow local users and possibly remote attackers to gain privileges by stealing the file before it has been processed...