CVE-2008-4951

CVE-2008-4951 affects dtc 0.29.6, enabling local users to overwrite arbitrary files through a symlink attack on /tmp/awstats.log, /tmp/spam.log.#####, and /tmp/spam_err.log, related to the accesslog.php and sa-wrapper scripts. The cited sources (NVD, SUSE, Ubuntu, CVE records) confirm the local a...

CVE-2008-4942

audiolink in audiolink 0.05 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/audiolink.db.tmp and 2 /tmp/audiolink.tb.tmp temporary files...

CVE-2008-4949

dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cil, b /tmp/pdo, and c /tmp/pdn temporary files, related to the 1 patcil and 2 patdiff scripts...

CVE-2008-4949

dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cil, b /tmp/pdo, and c /tmp/pdn temporary files, related to the 1 patcil and 2 patdiff scripts...

CVE-2008-4944

CVE-2008-4944 affects writtercontrol in cdcontrol 1.90. The vulnerability arises from a symlink attack on temporary files /tmp/v-recorder*-out, allowing local users to overwrite arbitrary files. The description and multiple references confirm local write access due to improper handling of tempora...

CVE-2008-4949

CVE-2008-4949 affects dist 3.5. Local users can overwrite arbitrary files via a symlink attack on temporary files /tmp/cil#####, /tmp/pdo#####, and /tmp/pdn#####, related to the patcil and patdiff scripts. Root cause is a symlink-based race in handling these temporary files. The description does ...

CVE-2008-4939

apertium 3.0.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.lex.cc, b /tmp/.deformat.l, c /tmp/.reformat.l, d /tmp/docxorig, e /tmp/docxsalida.zip, f /tmp/xlsxembed, g /tmp/xlsxorig, and h /tmp/xslxsalida.zip temporary files, related to the 1...

Debian: Security Advisory (DSA-1657-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FireGPG multiple security vulnerabilities

Information leakage with temporary files, insecure temporary files creation...

USN-657-1: Amarok vulnerability

Dwayne Litzenberger discovered that Amarok created temporary files in an insecure way. Local users could exploit a race condition to create or overwrite files with the privileges of the user invoking the program. CVE-2008-3699...

Debian DSA-1657-1 : qemu - insecure temporary files

Dmitry E. Oboukhov discovered that the qemu-make-debian-root script in qemu, fast processor emulator, creates temporary files insecurely, which may lead to a local denial of service through symlink attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

[SECURITY] [DSA 1657-1] New qemu packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1657-1 [email protected] http://www.debian.org/security/ Steve Kemp October 20, 2008 http://www.debian.org/security/faq -...

DSA-1657-1 qemu - denial of service

Bulletin has no description...

DEBIAN-CVE-2008-4553

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories...

CVE-2008-4553

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories...

Design/Logic Flaw

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories...

CVE-2008-4553

qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and directories...

CVE-2008-4214

Unspecified vulnerability in Script Editor in Mac OS X 10.4.11 and 10.5.5 allows local users to cause the scripting dictionary to be written to arbitrary locations, related to an "insecure file operation" on temporary files...

feta symbolic links vulnerability

Symboliclinks vulnerability on temporayr files creation...

Debian DSA-1648-1 : mon - insecure temporary files

Dmitry E. Oboukhov discovered that the test.alert script used in one of the alert functions in mon, a system to monitor hosts or services and alert about problems, creates temporary files insecurely, which may lead to a local denial of service through symlink attacks. %NASLMINLEVEL 70300 C Tenabl...