GLSA-200510-02 : Berkeley MPEG Tools: Multiple insecure temporary files

The remote host is affected by the vulnerability described in GLSA-200510-02 Berkeley MPEG Tools: Multiple insecure temporary files Mike Frysinger of the Gentoo Security Team discovered that mpegencode and the conversion utilities were creating temporary files with predictable or fixed filenames...

Debian DSA-835-1 : cfengine - insecure temporary files

Javier Fernandez-Sanguino Pena discovered several insecure temporary file uses in cfengine, a tool for configuring and maintaining networked machines, that can be exploited by a symlink attack to overwrite arbitrary files owned by the user executing cfengine, which is probably root. %NASLMINLEVEL...

Texinfo: Insecure temporary file creation

Background Texinfo is the official documentation system created by the GNU project. Description Frank Lichtenheld has discovered that the "sortoffline" function in texindex insecurely creates temporary files with predictable filenames. Impact A local attacker could create symbolic links in the...

Debian DSA-836-1 : cfengine2 - insecure temporary files

Javier Fernandez-Sanguino Pena discovered insecure temporary file use in cfengine2, a tool for configuring and maintaining networked machines, that can be exploited by a symlink attack to overwrite arbitrary files owned by the user executing cfengine, which is probably root. The oldstable...

Debian DSA-818-1 : kdeedu - insecure temporary files

Javier Fernandez-Sanguino Pena discovered that langen2kvhtml from the kvoctrain package from the kdeedu suite creates temporary files in an insecure fashion. This leaves them open for symlink attacks. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

[Full-disclosure] [ GLSA 200510-02 ] Berkeley MPEG Tools: Multiple insecure temporary files

Gentoo Linux Security Advisory GLSA 200510-02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Berkley MPEG Tools symbolic links problem

Insecure temporary files creation...

Berkeley MPEG Tools: Multiple insecure temporary files

Background The Berkeley MPEG Tools are a collection of utilities for manipulating MPEG video technology, including an encoder mpegencode and various conversion utilities. Description Mike Frysinger of the Gentoo Security Team discovered that mpegencode and the conversion utilities were creating...

[SECURITY] [DSA 836-1] New cfengine2 packages fix arbitrary file overwriting

-------------------------------------------------------------------------- Debian Security Advisory DSA 836-1 [email protected] http://www.debian.org/security/ Martin Schulze October 1st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 836-1] New cfengine2 packages fix arbitrary file overwriting

-------------------------------------------------------------------------- Debian Security Advisory DSA 836-1 [email protected] http://www.debian.org/security/ Martin Schulze October 1st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 835-1] New cfengine packages fix arbitrary file overwriting

-------------------------------------------------------------------------- Debian Security Advisory DSA 835-1 [email protected] http://www.debian.org/security/ Martin Schulze October 1st, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 835-1] New cfengine packages fix arbitrary file overwriting

-------------------------------------------------------------------------- Debian Security Advisory DSA 835-1 [email protected] http://www.debian.org/security/ Martin Schulze October 1st, 2005 http://www.debian.org/security/faq -...

apachetop utility symbolic links problem

Symbolic links problem on temporary filescreation...

DSA-836-1 cfengine2 - insecure temporary files

Bulletin has no description...

storeBackup symbolic links problem

Symbolic links problem on temporary files creaction...

DSA-835-1 cfengine - insecure temporary files

Bulletin has no description...

CVE-2005-3115

mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via 1 ts.stat, 2 ts.mpg, 3 foobar, 4 blockbar, or 5 foobarNNN...

CVE-2005-3111

The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack...

DEBIAN-CVE-2005-3111

The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack...

CVE-2005-3115

CVE-2005-3115 affects mpeg-tools = media-video/mpeg-tools-1.5b-r2. No exploit details are provided beyond the local risk in the linked advisories; no mitigation beyond upgrading is described in the available documents.