4318 matches found
DSA-1320-1 clamav
Bulletin has no description...
Code injection
libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cligentempstream function in clamd/clamdscan, which might allow local users to read sensitive files...
CVE-2007-3024
libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cligentempstream function in clamd/clamdscan, which might allow local users to read sensitive files...
CVE-2007-3024
CVE-2007-3024 affects libclamav components in ClamAV before 0.90.3 and 0.91 before 0.91rc1. The root cause is insecure permissions for temporary files created by cli_gentempstream in clamd/clamdscan, which could allow local users to read sensitive files. Implication: local access to temporary dat...
CVE-2007-3024
libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cligentempstream function in clamd/clamdscan, which might allow local users to read sensitive files...
CVE-2007-3024
libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that are created by the cligentempstream function in clamd/clamdscan, which might allow local users to read sensitive files...
Mandrake Linux Security Advisory : lha (MDKSA-2007:117)
lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked. Updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
lha symbolic links problem
Symbolic links problem on temporary files creation...
CVE-2007-2030
lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked...
Information disclosure
lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked...
CVE-2007-2030
lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked...
CVE-2007-2030
lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked...
CVE-2007-2030
The CVE-2007-2030 issue affects the lha LHA tool, specifically the lharc.c code, which does not securely create temporary files. This could allow a local attacker to read or write files by creating a file before LHA is invoked. Affected component: lharc.c in lha (no vendor/versions specified in t...
CVE-2007-2030
lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked...
CVE-2007-2030: Undefined Security Weakness
lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked...
WinMail Server 4.4 build 1124 - 'WebMail' Remote Add Super User
tempfolder."sessions/".$this-sid.".sess"; if!fileexists$sessionfile return false; $size = filesize$sessionfile; $fp = fopen$sessionfile, "rb"; if $fp $result = fread$fp, $size; fclose$fp; $result = unserializebase64decode$result; return $result; ... This function should check for session files...
Code injection
The Linux Security Auditing Tool LSAT allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using /tmp/lsat1.lsat...
CVE-2007-1500
The Linux Security Auditing Tool LSAT allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using /tmp/lsat1.lsat...
CVE-2007-1500
CVE-2007-1500 affects the Linux Security Auditing Tool (LSAT). The vulnerability arises from insecure temporary file handling: LSAT creates temporary files in /tmp with a predictable name, enabling a local attacker to exploit a symlink attack to overwrite arbitrary files with the caller’s privile...