CVE-2006-0512

PADL MigrationTools 46 creates temporary files insecurely, enabling a local attacker to overwrite arbitrary files via symlink attacks in migrate_all_online.sh, migrate_all_offline.sh, migrate_all_netinfo_online.sh, migrate_all_netinfo_offline.sh, migrate_all_nis_online.sh, migrate_all_nis_offline...

CVE-2005-4683

PADL MigrationTools 46, when a failure occurs, stores contents of /etc/shadow in a world-readable /tmp/nis.$$.ldif file, and possibly other sensitive information in other temporary files, which are not properly managed by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh...

CVE-2005-4683

PADL MigrationTools 46 is affected by CVE-2005-4683: on failure, sensitive data (e.g., /etc/shadow) may be written to world-readable temporary files such as /tmp/nis.$$ .ldif and possibly other temp files, due to improper handling by the suite of migration scripts (migrate_all_online.sh, migrate_...

net-snmp SNMP package fixproc utility symbolic link problem

Symbolic links problem on temporary files creation...

[Full-disclosure] [ MDKSA-2006:025 ] - Updated net-snmp packages fix vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:025 http://www.mandriva.com/security/ Package : net-snmp Date : January 26, 2006 Affected: 10.1, 10.2, Corporate 3.0, Multi Network Firewall 2.0 Problem Description: The fixproc application in Net-SNMP creat...

Ubuntu 5.04 / 5.10 : texinfo regression bug fix (USN-194-2)

USN-194-1 fixed a vulnerability in the 'texindex' program. Unfortunately this update introduced a regression that caused the program to abort when cleaning up temporary files which are used with extraordinarily large input files. The updated packages fix this. Note that Tenable Network Security h...

CVE-2005-3340

CVE-2005-3340 affects tuxpaint (tuxpaint) 0.9.14 and earlier. Multiple connected advisories describe insecure temporary file creation in tuxpaint-related scripts (notably tuxpaint-import.sh and related Debian/Ubuntu advisories). This is a local vulnerability that could enable manipulation of temp...

CVE-2005-3340

The tuxpaint-import.sh script in Tux Paint tuxpaint 0.9.14 and earlier creates temporary files insecurely, with unknown impact and attack vectors...

CVE-2005-3340

The tuxpaint-import.sh script in Tux Paint tuxpaint 0.9.14 and earlier creates temporary files insecurely, with unknown impact and attack vectors...

CVE-2005-3340

The tuxpaint-import.sh script in Tux Paint tuxpaint 0.9.14 and earlier creates temporary files insecurely, with unknown impact and attack vectors...

CVE-2005-3340: Undefined Security Weakness

The tuxpaint-import.sh script in Tux Paint tuxpaint 0.9.14 and earlier creates temporary files insecurely, with unknown impact and attack vectors...

AntiWord symbolic links problem

Word to Postscript document convertation insecure temporary file creation...

Tuxpaint paint program for children symbolic links problem

Symbolic links problem on temporary files creation bad guy can overwrite your child's files...

Ubuntu 4.10 : Standard C library script vulnerabilities (USN-4-1)

Recently, Trustix Secure Linux discovered some vulnerabilities in the libc6 package. The utilities 'catchsegv' and 'glibcbug' created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program. Not...

Ubuntu 4.10 / 5.04 : cfengine vulnerabilities (USN-198-1)

Javier Fernandez-Sanguino Pena discovered that several tools in the cfengine package vicf, cfmailfilter, and cfcron create and use temporary files in an insecure way. A local attacker could exploit this with a symlink attack to create or overwrite arbitrary files with the privileges of the user...

Ubuntu 4.10 : GhostScript utility script vulnerabilities (USN-3-1)

Recently, Trustix Secure Linux discovered some vulnerabilities in the gs-common package. The utilities 'pv.sh' and 'ps2epsi' created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program. Note...

Ubuntu 4.10 : groff vulnerabilities (USN-43-1)

Javier Fernandez-Sanguino Pena discovered that the auxiliary scripts 'eqn2graph' and 'pic2graph' created temporary files in an insecure way, which allowed exploitation of a race condition to create or overwrite files with the privileges of the user invoking the program. Note that Tenable Network...

Ubuntu 4.10 : openssl script vulnerability (USN-24-1)

Recently, Trustix Secure Linux discovered a vulnerability in the openssl package. The auxiliary script 'derchop' created temporary files in an insecure way, which could allow a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program. Note that...

Ubuntu 5.04 : graphviz vulnerability (USN-208-1)

Javier Fernandez-Sanguino Pena discovered that the 'dotty' tool created and used temporary files in an insecure way. A local attacker could exploit this with a symlink attack to create or overwrite arbitrary files with the privileges of the user running dotty. Note that Tenable Network Security h...

Ubuntu 4.10 : mysql-dfsg vulnerability (USN-63-1)

Javier Fernandez-Sanguino Pena noticed that the 'mysqlaccess' program created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the program. Note that Tenable Network Security has extracte...