CVE-2004-0969

The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

DEBIAN-CVE-2004-0974

The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2005-0018

CVE-2005-0018 concerns the f2c package (f2 shell script) where a symlink attack on temporary files allows a local user to read arbitrary files. Affected feature is the f2 script in the f2c package version 3.1, with root cause outlined as a symlink-based local file read. The impact is limited to c...

CVE-2005-0182

The moddosevasive module 1.9 and earlier for Apache creates temporary files with predictable filenames, which could allow remote attackers to overwrite arbitrary files via a symlink attack...

CVE-2005-0182

The vulnerability CVE-2005-0182 affects the mod_dosevasive Apache module, versions 1.9 and earlier. The issue arises because the module creates temporary files with predictable filenames, which could enable remote attackers to overwrite arbitrary files via a symlink attack. This could impact inte...

CVE-2005-0018

The f2 shell script in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files...

FireHOL: Insecure temporary file creation

Background FireHOL is an iptables rules generator. Description FireHOL insecurely creates temporary files with predictable names. Impact A local attacker could create malicious symbolic links to arbitrary system files. When FireHOL is executed, this could lead to these files being overwritten wit...

f2c: Insecure temporary file creation

Background f2c is a Fortran to C translator. Portage uses this package in some ebuilds to build Fortran sources. Description Javier Fernandez-Sanguino Pena from the Debian Security Audit Team discovered that f2c creates temporary files in world-writeable directories with predictable names. Impact...

CVE-2005-0069

The 1 tcltags or 2 vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files...

[SECURITY] [DSA 661-1] New f2c packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 661-1 [email protected] http://www.debian.org/security/ Martin Schulze January 27th, 2005 http://www.debian.org/security/faq -...

f2c -- insecure temporary files

Javier Fernández-Sanguino Peña reports two temporary file vulnerability within f2c. The vulnerabilities are caused due to weak temporary file handling. An attacker could create an symbolic link, causing a local user running f2c to overwrite the symlinked file. This could give the attacker elevate...

Debian DSA-661-2 : f2c - insecure temporary files

Dan McMahill noticed that our advisory DSA 661-1 did not correct the multiple insecure files problem, hence, this update. For completeness below is the original advisory text : Javier Fernandez-Sanguino Pena from the Debian Security Audit project discovered that f2c and fc, which are both part of...

DSA-658-1 libdbi-perl - insecure temporary file

Bulletin has no description...

[SA13970] FireHOL Insecure Temporary File Creation Vulnerabilities

TITLE: FireHOL Insecure Temporary File Creation Vulnerabilities SECUNIA ADVISORY ID: SA13970 VERIFY ADVISORY: http://secunia.com/advisories/13970/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: FireHOL 1.x http://secunia.com/product/4556/ DESCRIPTION: Sam Coute...

CVE-2004-1181

CVE-2004-1181 corresponds to the Debian htmlheadline issue (DSA-622-1) involving insecure temporary files that allow local users to overwrite arbitrary files via a symlink attack. Public details in connected docs identify the vulnerable component as htmlheadline, with the root cause stemming from...

[SA13933] Ghostscript Various Scripts Insecure Temporary File Creation

TITLE: Ghostscript Various Scripts Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13933 VERIFY ADVISORY: http://secunia.com/advisories/13933/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Ghostscript 8.x http://secunia.com/product/4550/ DESCRIPTION:...

Opened attachments are temporarily saved world-readable — Mozilla

Mozilla software released after March 2004 saves some temporary files with world-readable permissions. In the browser this is primarily content fed to helper applications for example, PDF files, and in the mail clients it is attachments...

kdelibs -- insecure temporary file creation

Davide Madrisan reports: The dcopidlng' script in the KDE library package kdelibs-3.3.2/dcop/dcopidlng/dcopidlng creates temporary files in a unsecure manner. Note: dcopidlng is only used at build time, so only users installing KDE are vulnerable, not users already running KDE...

USN-65-1: Apache utility script vulnerability

Javier Fernández-Sanguino Peña noticed that the "checkforensic" script created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the program...

PT-2005-1141 · Oracle +2 · Mysql Server +2

Name of the Vulnerable Software and Affected Versions: MySQL versions 3.x and earlier MySQL versions 4.0.23 and earlier MySQL versions 4.1.x before 4.1.10 MySQL versions 5.0.x before 5.0.3 Description: The issue allows local users to overwrite arbitrary files or read temporary files via a symlink...