3446 matches found
[SECURITY] [DSA 137-1] New mm packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 137-1 [email protected] http://www.debian.org/security/ Martin Schulze July 30th, 2002 - -------------------------------------------------------------------------- Package : mm Vulnerability...
DSA-137 mm - insecure temporary files
Bulletin has no description...
util-linux package vulnerable to privilege escalation when "ptmptmp" file is not removed properly when using "chfn" utility
Overview The util-linux package contains a race condition vulnerability that can be used to elevate privileges on the system. Description util-linux is shipped with Red Hat Linux and numerous other Linux distributions. It contains a collection of utility programs, such as fstab, mkfs, and chfn. T...
Sun Cobalt RaQ 4.0 - Predictable Temporary Filename Symbolic Link Attack
source: https://www.securityfocus.com/bid/5529/info A vulnerability has been reported in Cobalt RaQ that may allow attackers to obtain elevated privileges. The vulnerability exists in the /usr/lib/authenticate utility which is used by Apache for authentication purposes. Reportedly, the utility...
CVE-2001-1146
AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 is affected. The issue stems from creating temporary files with predictable names, enabling local users to perform a symlink attack to modify files. The description in the Connected documents confirms the root cause as predictable t...
CVE-2001-1085
CVE-2001-1085 concerns Lmail 2.7 and earlier. The vulnerability arises from a symlink attack on a temporary file, allowing local users to overwrite arbitrary files. The reports indicate local access is required; impact is partial on confidentiality, integrity, and availability per the provided me...
CVE-2001-1085
Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...
CVE-1999-1565
CVE-1999-1565 affects Man2html 2.1 and earlier. The vulnerability is a local privilege issue where a symlink attack on a temporary file allows local users to overwrite arbitrary files. The impact is described as partial confidentiality, integrity, and availability. The connected documents do not ...
CVE-1999-1332
Technical details about CVE-1999-1332 are not publicly provided in the connected documents you supplied; existing entries mention the vulnerability in gzexe but do not reveal affected versions, impact specifics, or fixes.
MAGIC Enterprise Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 immutec Security Advisory ID: SA-MAGIC-001 Date: 2001/12/17 Version: 0.2 Magic Enterprise multiple vulnerabilities Affected Software/System: ========================= Vendor : Magic Software http://www.magicsoftware.com Product : Magic Enterprise...
Символьные линки в klprfax_filter из kdeutils (symbolic link)
Создается временный файл /tmp/klprfax.filter без проверки символьных линков...
klprfax_filter symlink vulnerability
hi,all ! i'm sorry if this bug has been reported. klprfaxfilter kdeutils-2.2-2,is an application to make a printer that acts as a fax. when using klprfaxfilter,it would creat a temp file,/tmp/klprfax.filter,but the temporary file was not created safely,this vulnerability could be exploited to...
Netscape vulnerable to arbitrary file overwriting via symlink redirection of temporary file
Overview During installation, Netscape 6.0.1 creates a temporary file with insecure options and a predictable name in a world-writable location. By using a symbolic link attack, an attacker could cause overwrite of arbitrary files. Description The installation script for Netscape 6.0.1 creates a...
Low: Red Hat Security Advisory: : Updated diffutils packages available
Updated diffutils packages are now available, fixing a temporary file handling vulnerability in the sdiff program. When using sdiff in interactive mode, a temporary file is created. The new diffutils packages make sure to create that file in a secure way...
CVE-2001-0481
Mandrake Linux 8.0 is affected by a vulnerability in rpmdrake related to insecure temporary file handling (CVE-2001-0481). The connected Nessus advisory MDKSA-2001:043 confirms a temporary-file vulnerability in rpmdrake and provides an updated rpmdrake package to fix it. The NVD entry mirrors the...
CVE-2001-0465
TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow local users to obtain sensitive information...
CVE-1999-1541
shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file...
CVE-1999-1459
CVE-1999-1459 affects BMC PATROL Agent prior to 3.2.07. A local symlink attack on a temporary file can enable local users to gain root privileges. The underlying cause is improper handling of a temporary file name via a symlink. The connected documents do not provide a formal remediation or explo...
CVE-1999-1168
CVE-1999-1168 affects the install.iss script of Internet Security Scanner (ISS) for Linux v5.3, via a symlink race in a temporary file that lets a local user change arbitrary file permissions. Root cause: a symlink attack on a temporary file used during installation. Impact: local privilege/permi...