3962 matches found
security flaw
The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...
[SECURITY] [DSA 647-1] New mysql packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 647-1 [email protected] http://www.debian.org/security/ Martin Schulze January 19th, 2005 http://www.debian.org/security/faq -...
USN-63-1: MySQL client vulnerability
Javier Fernández-Sanguino Peña noticed that the "mysqlaccess" program created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the program...
USN-61-1: vim vulnerabilities
Javier Fernández-Sanguino Peña noticed that the auxillary scripts "tcltags" and "vimspell.sh" created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the script either by calling it...
Debian DSA-647-1 : mysql - insecure temporary files
Javier Fernandez-Sanguino Pena from the Debian Security Audit Project discovered a temporary file vulnerability in the mysqlaccess script of MySQL that could allow an unprivileged user to let root overwrite arbitrary files via a symlink attack and could also could unveil the contents of a tempora...
[SA13867] MySQL mysqlaccess Script Insecure Temporary File Creation
TITLE: MySQL mysqlaccess Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13867 VERIFY ADVISORY: http://secunia.com/advisories/13867/ CRITICAL: Less critical IMPACT: Manipulation of data, Exposure of sensitive information, Privilege escalation WHERE: Local system SOFTWARE: MySQL 4.x...
CVE-2005-0069
The 1 tcltags or 2 vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files...
DEBIAN-CVE-2005-0069
The 1 tcltags or 2 vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files...
Apache mod_dosevasive symbolic links problem
Symbolic links problem on temporary files creation...
Debian DSA-636-1 : glibc - insecure temporary files
Several insecure uses of temporary files have been discovered in support scripts in the libc6 package which provides the c library for a GNU/Linux system. Trustix developers found that the catchsegv script uses temporary files insecurely. Openwall developers discovered insecure temporary files in...
[SECURITY] [DSA 636-1] New libc6 packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 636-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 636-1] New libc6 packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 636-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2005 http://www.debian.org/security/faq -...
DSA-636-1 glibc - insecure temporary files
Bulletin has no description...
DSA-633-1 bmv - insecure temporary file
Bulletin has no description...
iproute2 netbug script symbolic links bug
netbug script symbolic links problem on temporary files creation...
CVE-2004-0996
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack...
DEBIAN-CVE-2004-0996
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2004-0770
romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of 1 gzip or 2 bzip ROM files...