4318 matches found
Debian Security Advisory DSA 927-1 (tkdiff)
The remote host is missing an update to tkdiff announced via advisory DSA 927-1. Javier Fernandez-Sanguino Pena from the Debian Security Audit project discovered that tkdiff, a graphical side by side diff utility, creates temporary files in an insecure fashion. For the old stable distribution woo...
Debian Security Advisory DSA 202-1 (im)
The remote host is missing an update to im announced via advisory DSA 202-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
GLSA-200801-03 : Claws Mail: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200801-03 Claws Mail: Insecure temporary file creation Nico Golde from Debian reported that the sylprint.pl script that is part of the Claws Mail tools creates temporary files in an insecure manner. Impact : A local attacker could...
openSUSE 10 Security Update : te_ams (te_ams-4819)
Buffer overflows in dvips and dviljk could be triggered by specially crafted dvi files CVE-2007-5935, CVE-2007-5937. dvips additionally created temporary files in an insecure manner CVE-2007-5936. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
SuSE 10 Security Update : TeX (ZYPP Patch Number 4818)
Buffer overflows in dvips and dviljk could be triggered by specially crafted dvi files CVE-2007-5935 / CVE-2007-5937. dvips additionally created temporary files in an insecure manner. CVE-2007-5936 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novel...
CVE-2007-6595
ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on 1 temporary files used by the cligentempfd function in libclamav/others.c or on 2 .ascii files used by sigtool, when utf16-decode is enabled...
Code injection
ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on 1 temporary files used by the cligentempfd function in libclamav/others.c or on 2 .ascii files used by sigtool, when utf16-decode is enabled...
CVE-2007-6595
ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on 1 temporary files used by the cligentempfd function in libclamav/others.c or on 2 .ascii files used by sigtool, when utf16-decode is enabled...
CVE-2007-6595
ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on 1 temporary files used by the cligentempfd function in libclamav/others.c or on 2 .ascii files used by sigtool, when utf16-decode is enabled...
DEBIAN-CVE-2007-6595
ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on 1 temporary files used by the cligentempfd function in libclamav/others.c or on 2 .ascii files used by sigtool, when utf16-decode is enabled...
CVE-2007-6595
The CVE-2007-6595 issue affects ClamAV 0.92, where local users can overwrite arbitrary files via a symlink attack on temporary files used by cli_gentempfd or on .ascii files in sigtool when utf16-decode is enabled. Root cause is a symlink handling flaw during temporary file creation. Impact is lo...
CVE-2007-6595
ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on 1 temporary files used by the cligentempfd function in libclamav/others.c or on 2 .ascii files used by sigtool, when utf16-decode is enabled...
ClamAV antivirus multiple security vulnerabilities
Protection bypass with UUEncode, race conditions on temporary files creation...
TK53 Advisory #2: Multiple vulnerabilities in ClamAV
======================================================================== TK53 Advisory 2 12/29/2007 - Multiple vulnerabilities in ClamAV ======================================================================== Authors: Roflek of TK53 [email protected], Lolek of TK53 [email protected] Affecte...
CVE-2007-6470
phpRPG 0.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read session ID values in files under tmp/, and then hijack sessions via PHPSESSID cookies...
GLSA-200712-11 : Portage: Information disclosure
The remote host is affected by the vulnerability described in GLSA-200712-11 Portage: Information disclosure Mike Frysinger reported that the 'etc-update' utility uses temporary files with the standard umask, which results in the files being world-readable when merging configuration files in a...
Portage: Information disclosure
Background Portage is the default Gentoo package management system. Description Mike Frysinger reported that the "etc-update" utility uses temporary files with the standard umask, which results in the files being world-readable when merging configuration files in a default setup. Impact A local...
Hugin symbolic links vulnerability
Unsafe temporary files creation...