security flaw

Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files...

eix symbolic links problem

Symbolic links problem on temporary files creation...

ipmenu iptables/iproute2 GUI symbolic links

Symbolic links problem on temporary files creation...

CVE-2005-3647

Folder Guard allows local users to bypass protections by running from or installing to the temporary files directory...

CVE-2005-3647

The CVE-2005-3647 issue is described as a local privilege-bypass in Folder Guard. Local users can bypass protections by running from or installing to the temporary files directory. Underlying cause: the temporary files path enables bypass of protections. Impact (per CVSS): partial confidentiality...

Low: Red Hat Security Advisory: lm_sensors security update

Updated lmsensors packages that fix an insecure file issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The lmsensors package includes a collection of modules for general SMBus access and hardware monitoring. This package...

security flaw

pwmconfig in LMsensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file...

Fedora Core 4 : lm_sensors-2.9.1-3.FC4.1 (2005-1053)

The lmsensors package includes a collection of modules for general SMBus access and hardware monitoring. NOTE: this package requires special support which is not in standard 2.2-vintage kernels. A bug was found in the pwmconfig tool which uses temporary files in an insecure manner. The pwconfig...

thttpd symbolic links problem

syslogtocern script insecure temporary files creation...

Sambar pagecount Vulnerability - Active Check

By default, there is a pagecount script with Sambar Web Server located at http://sambarserver/session/pagecount. This counter writes its temporary files in c:\sambardirectory\tmp. It allows to overwrite any files on the filesystem since the SPDX-FileCopyrightText: 2001 StrongHoldNet...

CVE-2005-3331

viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

DEBIAN-CVE-2005-3331

viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-3331

CVE-2005-3331 concerns the mgdiff 1.0 tool, where the function viewpatch enables a local user to overwrite arbitrary files by exploiting a symlink attack on temporary files. Root cause: inadequate handling of temporary file symlinks during viewpatch. Impact: local users could modify files they sh...

mgdiff diff graphical interface symbolic links problem

viewpatch script insecure temporary files creation...

CVE-2005-3289

LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file...

CVE-2005-3289

LSCFG in IBM AIX 5.2 and 5.3 does not create temporary files securely, which allows local users to corrupt /etc/passwd and possibly other system files via the trace file...

CVE-2005-3289

CVE-2005-3289 affects IBM AIX 5.2 and 5.3 where LSCFG fails to securely create temporary files, enabling local users to corrupt /etc/passwd and possibly other system files via the trace file. Connected sources corroborate the binary-level description but do not provide explicit patch/version reme...

CVE-2005-3121

A rule file in module-assistant before 0.9.10 causes a temporary file to be created insecurely, which allows local users to conduct unauthorized operations...

flexbackup backup utility symbolic links problem

Symbolic links problem during temporary files creation...

USN-208-1: graphviz vulnerability

Javier Fernández-Sanguino Peña discovered that the "dotty" tool created and used temporary files in an insecure way. A local attacker could exploit this with a symlink attack to create or overwrite arbitrary files with the privileges of the user running dotty...