4320 matches found
PT-2013-1819 · Red Hat · Red Hat Server +2
Name of the Vulnerable Software and Affected Versions: Red Hat Storage Management Console version 2.0 Red Hat Native Client version 2.0 Red Hat Server version 2.0 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on multiple temporary files created by...
PostgreSQL 临时文件创建漏洞(CVE-2013-1902)
BUGTRAQ ID: 58877 CVECAN ID: CVE-2013-1902 PostgreSQL是一款高级对象－关系型数据库管理系统，支持扩展的SQL标准子集。 PostgreSQL 9.2.4, 9.1.9, 9.0.13之前版本存用可预测的文件名生成了不安全的临时文件，本地攻击者可以进行符号链接攻击。 0 Debian Linux 6.0 x PostgreSQL 9.x 厂商补丁： PostgreSQL ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.postgresql.org...
OpenFabrics ibutils symbolic links vulnerability
infiniband utility unsafe temporary files creation...
CVE-2013-1902
PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for Linux and Mac OS X."...
CVE-2013-1902
CVE-2013-1902 concerns PostgreSQL versions 8.3.x before 8.3.23, 8.4.x before 8.4.17, 9.0.x before 9.0.13, 9.1.x before 9.1.9, and 9.2.x before 9.2.4, which generate insecure temporary files with predictable filenames. The description notes an unspecified impact and attack vectors related to graph...
CVE-2013-1902
PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for Linux and Mac OS X."...
CVE-2013-1902: Undefined Security Weakness
PostgreSQL, 9.2.x before 9.2.4, 9.1.x before 9.1.9, 9.0.x before 9.0.13, 8.4.x before 8.4.17, and 8.3.x before 8.3.23 generates insecure temporary files with predictable filenames, which has unspecified impact and attack vectors related to "graphical installers for Linux and Mac OS X."...
[SECURITY] CVE-2013-0248 Apache Commons FileUpload - Insecure examples
CVE-2013-0248 Apache Commons FileUpload - Insecure examples Severity: Low Vendor: The Apache Software Foundation Versions Affected: - Commons FileUpload 1.0 to 1.2.2 Description: Commons FileUpload provides file upload capability for Servlets and web applications. During the upload process,...
Apache Commons FileUpload不安全临时文件创建漏洞(CVE-2013-0248)
BUGTRAQ ID: 58326 CVECAN ID: CVE-2013-0248 Apache Commons FileUpload软件包可以向小服务程序和Web应用添加高性能的文件上传功能。 Apache Commons FileUpload v1.0 - 1.2.2在上传文件过程中，会将上传的文件临时存在磁盘上，默认的位于系统的tmp目录内。因为临时文件具有可预测的文件名，并存储在可公开写入的位置，这就易于受到TOCTOU攻击。成功攻击需要攻击者对tmp目录具有写访问权限。将存储位置设在不能公开写入的位置，可以防止此攻击。 0 Apache Group Commons...
CVE-2013-0200
HP Linux Imaging and Printing HPLIP through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/hpcupsfilterc.bmp, 2 /tmp/hpcupsfilterk.bmp, 3 /tmp/hpcupsjob.out, 4 /tmp/hpijs.out, or 5 /tmp/hppsjob.out temporary file, a different vulnerability than...
DEBIAN-CVE-2013-0200
HP Linux Imaging and Printing HPLIP through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/hpcupsfilterc.bmp, 2 /tmp/hpcupsfilterk.bmp, 3 /tmp/hpcupsjob.out, 4 /tmp/hpijs.out, or 5 /tmp/hppsjob.out temporary file, a different vulnerability than...
CVE-2013-0200
HP Linux Imaging and Printing HPLIP through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/hpcupsfilterc.bmp, 2 /tmp/hpcupsfilterk.bmp, 3 /tmp/hpcupsjob.out, 4 /tmp/hpijs.out, or 5 /tmp/hppsjob.out temporary file, a different vulnerability than...
CVE-2013-0200: Improper Link Resolution Before File Access
HP Linux Imaging and Printing HPLIP through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/hpcupsfilterc.bmp, 2 /tmp/hpcupsfilterk.bmp, 3 /tmp/hpcupsjob.out, 4 /tmp/hpijs.out, or 5 /tmp/hppsjob.out temporary file, a different vulnerability than...
CVE-2013-0200
HP Linux Imaging and Printing HPLIP through 3.12.4 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/hpcupsfilterc.bmp, 2 /tmp/hpcupsfilterk.bmp, 3 /tmp/hpcupsjob.out, 4 /tmp/hpijs.out, or 5 /tmp/hppsjob.out temporary file, a different vulnerability than...
packstack: insecure use of /tmp in manifest creation
1 installer/basedefs.py and 2 modules/ospluginutils.py in PackStack allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp...
PT-2013-2142 · Red Hat · Red Hat Openshift Origin
Name of the Vulnerable Software and Affected Versions: Red Hat OpenShift Origin versions prior to 1.1 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp. This is due to a problem in the lockwrap function ...
PT-2013-1081 · Hewlett Packard +3 · Hplip +3
Name of the Vulnerable Software and Affected Versions: HP Linux Imaging and Printing HPLIP versions 3.12.4 and earlier Description: The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files, potentially leading to disruption of confidentiality, integrity, a...
SuSE 11.1 Security Update : puppet (SAT Patch Number 6115)
This update fixes the following issues : - Filebucket arbitrary file read. CVE-2011-1986 - Filebucket DoS. CVE-2012-1987 - Filebucket arbitrary code execution. CVE-2012-1988 - insecure handling of temporary files. CVE-2012-1989 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...