4318 matches found
CVE-2007-0237
The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...
DEBIAN-CVE-2007-0237
The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2007-0237
CVE-2007-0237 affects the ndeb-binary feature of Lookup (lookup-el). The vulnerability arises from insecure temporary file handling, allowing a local attacker to perform a symlink attack to overwrite arbitrary files. Affected advisories/documentation: Gentoo GLSA 200712-07, GLSA 200712-07 (Gentoo...
CVE-2007-0237
The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2007-0237
The ndeb-binary feature in Lookup lookup-el allows local users to overwrite arbitrary files via a symlink attack on temporary files...
GLSA-200703-20 : LSAT: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200703-20 LSAT: Insecure temporary file creation LSAT insecurely writes in /tmp with a predictable filename. Impact : A local attacker could create symbolic links in the temporary files directory, pointing to a valid file somewher...
Lookup electronic dictionaries interface symbolic links problem
Symbolic links problem on temporary files creation...
LSAT: Insecure temporary file creation
Background The Linux Security Auditing Tool LSAT is a post install security auditor which checks many system configurations and local network settings on the system for common security or configuration errors and for packages that are not needed. Description LSAT insecurely writes in /tmp with a...
Smb4K: Multiple vulnerabilities
Background Smb4K is a SMB/CIFS Windows share browser for KDE. Description Kees Cook of the Ubuntu Security Team has identified multiple vulnerabilities in Smb4K. The writeFile function of smb4k/core/smb4kfileio.cpp makes insecure usage of temporary files. The writeFile function also stores the...
IBM DB2 database symboli links
Symboli links problem on temporary files creation...
gnucash symbolic links vulnerability
Symbolic links problem on temporary files creation...
CVE-2007-0007
gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 gnucash.trace, 2 qof.trace, and 3 qof.trace.PID temporary files...
Design/Logic Flaw
gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 gnucash.trace, 2 qof.trace, and 3 qof.trace.PID temporary files...
CVE-2007-0007
gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 gnucash.trace, 2 qof.trace, and 3 qof.trace.PID temporary files...
DEBIAN-CVE-2007-0007
gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 gnucash.trace, 2 qof.trace, and 3 qof.trace.PID temporary files...
CVE-2007-0007
gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 gnucash.trace, 2 qof.trace, and 3 qof.trace.PID temporary files...
Mandrake Linux Security Advisory : mutt (MDKSA-2006:190)
A race condition in the safeopen function in the Mutt mail client 1.5.12 and earlier, when creating temporary files in an NFS filesystem, allows local users to overwrite arbitrary files due to limitations of the use of the OEXCL flag on NFS filesystems. CVE-2006-5297 The muttadvmktemp function in...
Mandrake Linux Security Advisory : mono (MDKSA-2006:188)
Sebastian Krahmer of the SUSE security team found that the System.CodeDom.Compiler classes in mono used temporary files in an insecure way that could allow a symbolic link attack to overwrite arbitrary files with the privileges of the user running a program that made use of those classes. Updated...
FreeBSD : kdelibs insecure temporary file handling (603fe36d-ec9d-11d8-b913-000c41e2cdad)
According to a KDE Security Advisory, KDE may sometimes create temporary files without properly checking the ownership and type of the target path. This could allow a local attacker to cause KDE applications to overwrite arbitrary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
DEBIAN-CVE-2007-0801
The nsExternalAppHandler::SetUpTempFile function in Mozilla Firefox 1.5.0.9 creates temporary files with predictable filenames based on creation time, which allows remote attackers to execute arbitrary web script or HTML via a crafted XMLHttpRequest...