CVE-2008-4108

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

CVE-2008-4085

plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on 1 cut.$$, 2 head.$$, 3 awk.$$, and 4 ps.$$ temporary files in /tmp/...

CVE-2008-4085

plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on 1 cut.$$, 2 head.$$, 3 awk.$$, and 4 ps.$$ temporary files in /tmp/...

Command injection

plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on 1 cut.$$, 2 head.$$, 3 awk.$$, and 4 ps.$$ temporary files in /tmp/...

CVE-2008-4085

plaiter in Plait before 1.6 allows local users to overwrite arbitrary files via a symlink attack on 1 cut.$$, 2 head.$$, 3 awk.$$, and 4 ps.$$ temporary files in /tmp/...

Fedora 9 : xastir-1.9.2-9.fc9 (2008-7541)

Multiple insecure temporary file usage flaws were identified in the get- maptools.sh and getshapelib.sh scripts shipped in xastir packages. As those scripts are not needed with Fedora-distributed xastir packages they automate installation of libraries used by xastir, which are provided in the...

Code injection

genmsgidx in Tiger 3.2.2 allows local users to overwrite or delete arbitrary files via a symlink attack on temporary files...

DEBIAN-CVE-2008-3931

javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

UBUNTU-CVE-2008-3931

javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

DEBIAN-CVE-2008-3927

genmsgidx in Tiger 3.2.2 allows local users to overwrite or delete arbitrary files via a symlink attack on temporary files...

CVE-2008-3927

genmsgidx in Tiger 3.2.2 allows local users to overwrite or delete arbitrary files via a symlink attack on temporary files...

CVE-2008-3931

javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2008-3931

Summary of CVE-2008-3931 (R-base): A symlink-based vulnerability in the javareconf script of R allowed local attackers to overwrite arbitrary files via insecure temporary file handling. The issue is rooted in the way temporary files are created by javareconf, enabling a local write when the scrip...

FreeBSD Ports: f2c

The remote host is missing an update to the system as announced in the referenced advisory. VID 43cb40b3-c8c2-11da-a672-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: heartbeat

The remote host is missing an update to the system as announced in the referenced advisory. VID f6447303-9ec9-11da-b410-000e0c2e438a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: portupgrade

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: cvs+ipv6

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Amarok 'MagnatuneBrowser::listDownloadComplete()'不安全临时文件建立漏洞

BUGTRAQ ID: 30662 CNCAN ID：CNCAN-2008081412 Amarok是一款Linux/Unix平台下的音乐播放器。 Amarok不安全处理临时文件，本地攻击者可以利用漏洞通过符号链接攻击破坏系统文件。 问题存在于'MagnatuneBrowser::listDownloadComplete'函数中，由于不安全建立临时文件，攻击者通过符号链接以用户进程权限覆盖系统的任意文件，造成拒绝服务或特权提升。 Amarok 1.4.9 1 目前没有解决方案提供： http://amarok.kde.org/...

UUDeview symbolic links vulnerability

Insecure temporary files creation...

GLSA-200808-11 : UUDeview: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200808-11 UUDeview: Insecure temporary file creation UUdeview makes insecure usage of the tempnam function when creating temporary files. NZBGet includes a copy of the vulnerable code. Impact : A local attacker could exploit this...