CVE-2009-5042

python-docutils allows insecure usage of temporary files...

Code injection

python-docutils allows insecure usage of temporary files...

CVE-2009-5042

python-docutils allows insecure usage of temporary files...

CVE-2009-5042

CVE-2009-5042 involves the python-docutils project and is documented as allowing insecure usage of temporary files. The connected sources corroborate this vulnerability across multiple feeds (NVD, RH, OSV, Debian, GHSA, and others). Public metrics indicate two CVSS baselines: CVSS v2 base score 6...

CVE-2009-5042

python-docutils allows insecure usage of temporary files...

CVE-2010-2061

rpcbind 0.2.0 does not properly validate 1 /tmp/portmap.xdr and 2 /tmp/rpcbind.xdr, which can be created by an attacker before the daemon is started...

CVE-2010-3373

paxtest handles temporary files insecurely...

DEBIAN-CVE-2010-3373

paxtest handles temporary files insecurely...

CVE-2010-3373

paxtest handles temporary files insecurely...

Design/Logic Flaw

paxtest handles temporary files insecurely...

CVE-2010-3373

paxtest handles temporary files insecurely...

CVE-2010-3373

paxtest handles temporary files insecurely...

CVE-2010-3373

Technical details for CVE-2010-3373 are not publicly available in the provided documents; multiple feeds list the issue as paxtest insecure temporary file handling, but no vendor/product/version specifics or fixes are disclosed. Monitor for updates.

CVE-2017-7549

A flaw was found in instack-undercloud where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files...

CVE-2008-1103

Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues."...

OPENSUSE-SU-2019:1891-1 Security update for libqb

This update for libqb fixes the following issue: Security issue fixed: - CVE-2019-12779: Fixed an insecure treatment of IPC temporary files which could have allowed a local attacker to overwrite privileged system files bsc1137835. This update was imported from the SUSE:SLE-15-SP1:Update update...

keepalived: Improper pathname validation allows for overwrite of arbitrary filenames via symlinks

keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This allowed local users to overwrite arbitrary files if fs.protectedsymlinks is set to 0, as demonstrated by a symlink from /tmp/keepalived.data or...

ruby: Unintentional file and directory creation with directory traversal in tempfile and tmpdir

It was found that the tmpdir and tempfile modules did not sanitize their file name argument. An attacker with control over the name could create temporary files and directories outside of the dedicated directory...

EulerOS 2.0 SP8 : keepalived (EulerOS-SA-2019-1770)

According to the versions of the keepalived package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Heap-based buffer overflow vulnerability in extractstatuscode function in lib/html.c that parses HTTP status code returned from web server...

openSUSE Security Update : libqb (openSUSE-2019-1752)

This update for libqb fixes the following issue : Security issue fixed: - CVE-2019-12779: Fixed an insecure treatment of IPC temporary files which could have allowed a local attacker to overwrite privileged system files bsc1137835. This update was imported from the SUSE:SLE-15-SP1:Update update...