3804 matches found
CVE-1999-1565
CVE-1999-1565 affects Man2html 2.1 and earlier. The vulnerability is a local privilege issue where a symlink attack on a temporary file allows local users to overwrite arbitrary files. The impact is described as partial confidentiality, integrity, and availability. The connected documents do not ...
CVE-1999-1332
Technical details about CVE-1999-1332 are not publicly provided in the connected documents you supplied; existing entries mention the vulnerability in gzexe but do not reveal affected versions, impact specifics, or fixes.
MAGIC Enterprise Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 immutec Security Advisory ID: SA-MAGIC-001 Date: 2001/12/17 Version: 0.2 Magic Enterprise multiple vulnerabilities Affected Software/System: ========================= Vendor : Magic Software http://www.magicsoftware.com Product : Magic Enterprise...
klprfax_filter symlink vulnerability
hi,all ! i'm sorry if this bug has been reported. klprfaxfilter kdeutils-2.2-2,is an application to make a printer that acts as a fax. when using klprfaxfilter,it would creat a temp file,/tmp/klprfax.filter,but the temporary file was not created safely,this vulnerability could be exploited to...
Символьные линки в klprfax_filter из kdeutils (symbolic link)
Создается временный файл /tmp/klprfax.filter без проверки символьных линков...
Netscape vulnerable to arbitrary file overwriting via symlink redirection of temporary file
Overview During installation, Netscape 6.0.1 creates a temporary file with insecure options and a predictable name in a world-writable location. By using a symbolic link attack, an attacker could cause overwrite of arbitrary files. Description The installation script for Netscape 6.0.1 creates a...
Low: Red Hat Security Advisory: : Updated diffutils packages available
Updated diffutils packages are now available, fixing a temporary file handling vulnerability in the sdiff program. When using sdiff in interactive mode, a temporary file is created. The new diffutils packages make sure to create that file in a secure way...
CVE-2001-0481
Mandrake Linux 8.0 is affected by a vulnerability in rpmdrake related to insecure temporary file handling (CVE-2001-0481). The connected Nessus advisory MDKSA-2001:043 confirms a temporary-file vulnerability in rpmdrake and provides an updated rpmdrake package to fix it. The NVD entry mirrors the...
CVE-2001-0465
TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow local users to obtain sensitive information...
CVE-2001-0235: Undefined Security Weakness
Vulnerability in crontab allows local users to read crontab files of other users by replacing the temporary file that is being edited while crontab is running...
CVE-2001-0481: Undefined Security Weakness
Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling...
CVE-2001-0465: Undefined Security Weakness
TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow local users to obtain sensitive information...
CVE-1999-1459
CVE-1999-1459 affects BMC PATROL Agent prior to 3.2.07. A local symlink attack on a temporary file can enable local users to gain root privileges. The underlying cause is improper handling of a temporary file name via a symlink. The connected documents do not provide a formal remediation or explo...
CVE-1999-1541
shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file...
CVE-1999-1168
CVE-1999-1168 affects the install.iss script of Internet Security Scanner (ISS) for Linux v5.3, via a symlink race in a temporary file that lets a local user change arbitrary file permissions. Root cause: a symlink attack on a temporary file used during installation. Impact: local privilege/permi...
CVE-1999-1439
gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files...
Dangerous temp file creation during installation of Netscape 6.
During installation of Netscape 6.01a for Solaris 2.7/8 Sparc, I noticed the file /tmp/admin.3842 was created with mode 644. As you already know if this package is installed by root in multiuser mode a malicious user could use this to overwrite system files etc.. Here is the dangerous code: grep...
Символьные линки в Netscape 6 (symbolic link)
Создается временный файл с предсказуемым именем без проверки символьных линков...
