Slackware Linux 3.4 - 'pkgtool' Temporary File

source: https://www.securityfocus.com/bid/82/info pkgtool creates the file /tmp/reply insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/reply to any file and wait for root to run the program. This will clober the target file. The file created has permissions...

Slackware Linux 3.4 - makebootdisk Temporary File

Slackware Linux 3.4 - makebootdisk Temporary File source: https://www.securityfocus.com/bid/78/info makebootdisk creates the file /tmp/return insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/return to any file and wait for root to run the program. This will...

Slackware Linux 3.4 liloconfig-color temporary file Vulnerability

Exploit for linux platform in category dos / poc $ ln -s /tmp/reply /etc/passwd 0day.today 2017-12-31...

SGI IRIX 6.4 - startmidi Local Privilege Escalation

SGI IRIX 6.4 - startmidi Local Privilege Escalation source: https://www.securityfocus.com/bid/469/info A vulnerability exists in the startmidi program from Silicon Graphics. This utility is included with Irix versions 5.x and 6.x with the Iris Digital Media Execution Environment. startmidi is...

SGI IRIX 6.4 - 'startmidi' Local Privilege Escalation

source: https://www.securityfocus.com/bid/469/info A vulnerability exists in the startmidi program from Silicon Graphics. This utility is included with Irix versions 5.x and 6.x with the Iris Digital Media Execution Environment. startmidi is setuid root, and creates a temporary file called...

Solaris 7.0 - aspppd Insecure Temporary File Creation

Solaris 7.0 - aspppd Insecure Temporary File Creation source: https://www.securityfocus.com/bid/292/info Aspppd is a tool shipped with Solaris for dial up PPP access. This tool creates files in the /tmp directory insecurely in particular /tmp/.asppp.fifo allowing other users to link to these file...