astats symbolic links problem

Symboli links problem on temporary files creation...

DSA-620-1 perl - insecure temporary files / directories

Bulletin has no description...

DEBIAN-CVE-2004-1377

The 1 fixps aka fixps.in and 2 psmandup aka psmandup.in scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files...

USN-51-1: teTeX auxiliary script vulnerability

Javier Fernández-Sanguino Peña noticed that "xdvizilla", an auxiliary script to integrate DVI file viewing in Mozilla-based browsers, created temporary files and directories in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges o...

CVE-2004-1336

The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2004-1336

The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack...

[SECURITY] [DSA 615-1] New debmake package fixes insecure temporary directories

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 615-1 [email protected] http://www.debian.org/security/ Martin Schulze December 22nd, 2004 http://www.debian.org/security/faq -...

Debian DSA-615-1 : debmake - insecure temporary files

Javier Fernandez-Sanguino Pena from the Debian Security Audit Project noticed that the debstd script from debmake, a deprecated helper package for Debian packaging, created temporary directories in an insecure manner. This can be exploited by a malicious user to overwrite arbitrary files owned by...

[SECURITY] [DSA 615-1] New debmake package fixes insecure temporary directories

-------------------------------------------------------------------------- Debian Security Advisory DSA 615-1 [email protected] http://www.debian.org/security/ Martin Schulze December 22nd, 2004 http://www.debian.org/security/faq -...

CVE-2004-1276

IglooFTP 0.6.1, when recursively uploading a directory, allows local users to overwrite the files that are being uploaded by creating temporary files with names generated by the tmpnam function, before the files are opened by IglooFTP...

security flaw

The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files...

security flaw

The makeoidjoinscheck script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files...

groff -- pic2graph and eqn2graph are vulnerable to symlink attack through temporary files

The eqn2graph and pic2graph scripts in groff 1.18.1 allow local users to overwrite arbitrary files via a symlink attack on temporary files...

GLSA-200412-11 : Cscope: Insecure creation of temporary files

The remote host is affected by the vulnerability described in GLSA-200412-11 Cscope: Insecure creation of temporary files Cscope creates temporary files in world-writable directories with predictable names. Impact : A local attacker could create symbolic links in the temporary files directory,...

Cscope: Insecure creation of temporary files

Background Cscope is a developer utility used to browse and manage source code. Description Cscope creates temporary files in world-writable directories with predictable names. Impact A local attacker could create symbolic links in the temporary files directory, pointing to a valid file somewhere...

CVE-2004-0770

romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of 1 gzip or 2 bzip ROM files...

CVE-2004-0770

romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of 1 gzip or 2 bzip ROM files...

GLSA-200412-05 : mirrorselect: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200412-05 mirrorselect: Insecure temporary file creation Ervin Nemeth discovered that mirrorselect creates temporary files in world-writable directories with predictable names. Impact : A local attacker could create symbolic links...

Mandrake Linux Security Advisory : openssl (MDKSA-2004:147)

The Trustix developers found that the derchop script, included in the openssl package, created temporary files insecurely. This could allow local users to overwrite files using a symlink attack. The updated packages have been patched to prevent this problem. %NASLMINLEVEL 70300 C Tenable Network...

GLSA-200412-04 : Perl: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200412-04 Perl: Insecure temporary file creation Some Perl modules create temporary files in world-writable directories with predictable names. Impact : A local attacker could create symbolic links in the temporary files directory...