CVE-2007-6595

ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on 1 temporary files used by the cligentempfd function in libclamav/others.c or on 2 .ascii files used by sigtool, when utf16-decode is enabled...

Code injection

ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on 1 temporary files used by the cligentempfd function in libclamav/others.c or on 2 .ascii files used by sigtool, when utf16-decode is enabled...

CVE-2007-6595

ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on 1 temporary files used by the cligentempfd function in libclamav/others.c or on 2 .ascii files used by sigtool, when utf16-decode is enabled...

CVE-2007-6595

ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on 1 temporary files used by the cligentempfd function in libclamav/others.c or on 2 .ascii files used by sigtool, when utf16-decode is enabled...

CVE-2007-6595

The CVE-2007-6595 issue affects ClamAV 0.92, where local users can overwrite arbitrary files via a symlink attack on temporary files used by cli_gentempfd or on .ascii files in sigtool when utf16-decode is enabled. Root cause is a symlink handling flaw during temporary file creation. Impact is lo...

ClamAV antivirus multiple security vulnerabilities

Protection bypass with UUEncode, race conditions on temporary files creation...

TK53 Advisory #2: Multiple vulnerabilities in ClamAV

======================================================================== TK53 Advisory 2 12/29/2007 - Multiple vulnerabilities in ClamAV ======================================================================== Authors: Roflek of TK53 [email protected], Lolek of TK53 [email protected] Affecte...

CVE-2007-6470

phpRPG 0.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read session ID values in files under tmp/, and then hijack sessions via PHPSESSID cookies...

GLSA-200712-11 : Portage: Information disclosure

The remote host is affected by the vulnerability described in GLSA-200712-11 Portage: Information disclosure Mike Frysinger reported that the 'etc-update' utility uses temporary files with the standard umask, which results in the files being world-readable when merging configuration files in a...

Portage: Information disclosure

Background Portage is the default Gentoo package management system. Description Mike Frysinger reported that the "etc-update" utility uses temporary files with the standard umask, which results in the files being world-readable when merging configuration files in a default setup. Impact A local...

Hugin symbolic links vulnerability

Unsafe temporary files creation...

Code injection

Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2007-6209

Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

DEBIAN-CVE-2007-6209

Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2007-6209

Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2007-6209

Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2007-6209

CVE-2007-6209: In zsh 4.3.4, the Util/difflog.pl component is vulnerable to a local vulnerability where a symlink attack on temporary files allows local users to overwrite arbitrary files. The root cause is a symlink race condition in handling temporary files. Impact details are described as part...

CVE-2007-6209

Util/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2007-6131

buttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a symlink attack on the 1 scan.pnm and 2 scan.jpg temporary files...

GLSA-200711-32 : Feynmf: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200711-32 Feynmf: Insecure temporary file creation Kevin B. McCarty discovered that the feynmf.pl script creates a temporary 'properly list' file at the location '$TMPDIR/feynmf$PID.pl', where $PID is the process ID. Impact : A...