CVE-2004-0996

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2004-0996

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack...

CScope symbolic links problem

Symlink problem on temporary files...

Cscope 13.015.x - Insecure Temporary File Creation (1)

Cscope 13.015.x - Insecure Temporary File Creation 1 source: https://www.securityfocus.com/bid/11697/info Cscope creates temporary files in an insecure way. A design error causes the application to fail to verify the presence of a file before writing to it. During execution, the utility reportedl...

Cscope 13.015.x - Insecure Temporary File Creation (2)

Cscope 13.015.x - Insecure Temporary File Creation 2 // source: https://www.securityfocus.com/bid/11697/info Cscope creates temporary files in an insecure way. A design error causes the application to fail to verify the presence of a file before writing to it. During execution, the utility...

GLSA-200411-22 : Davfs2, lvm-user: Insecure tempfile handling

The remote host is affected by the vulnerability described in GLSA-200411-22 Davfs2, lvm-user: Insecure tempfile handling Florian Schilhabel from the Gentoo Linux Security Audit Team found that Davfs2 insecurely created .pid files in /tmp. Furthermore, Trustix Secure Linux found that the...

USN-24-1: openssl script vulnerability

Recently, Trustix Secure Linux discovered a vulnerability in the openssl package. The auxiliary script "derchop" created temporary files in an insecure way, which could allow a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program...

Davfs2, lvm-user: Insecure tempfile handling

Background Davfs2 is a file system driver that allows you to mount a WebDAV server as a local disk drive. lvm-user is a package providing userland utilities for LVM Logical Volume Management 1.x features. Description Florian Schilhabel from the Gentoo Linux Security Audit Team found that Davfs2...

mtink symbolic links problem

Symboli links problem on temporary files creation...

[ GLSA 200411-17 ] mtink: Insecure tempfile handling

Gentoo Linux Security Advisory GLSA 200411-17 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

[SECURITY] [DSA 588-1] New gzip packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 588-1 [email protected] http://www.debian.org/security/ Martin Schulze November 8th, 2004 http://www.debian.org/security/faq -...

DSA-588-1 gzip - insecure temporary files

Bulletin has no description...

Portage, Gentoolkit: Temporary file vulnerabilities

Background Portage is Gentoo's package management tool. The dispatch-conf utility allows for easy rollback of configuration file changes and automatic updates of configurations files never modified by users. Gentoolkit is a collection of Gentoo specific administration scripts, one of which is the...

PostgreSQL symbolic links

makeoidjoinscheck script temporary files problem...

catdoc symbolic links

xlsview creates temporary files unsecurely...

[SA12974] GNU Troff "groffer.sh" Script Insecure Temporary File Creation

TITLE: GNU Troff "groffer.sh" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA12974 VERIFY ADVISORY: http://secunia.com/advisories/12974/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: GNU Troff groff 1.x http://secunia.com/product/4150/...

[SA12976] Netatalk "etc2ps.sh" Script Insecure Temporary File Creation

TITLE: Netatalk "etc2ps.sh" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA12976 VERIFY ADVISORY: http://secunia.com/advisories/12976/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Netatalk 2.x http://secunia.com/product/4147/ Netatalk 1.x...

GLSA-200410-24 : MIT krb5: Insecure temporary file use in send-pr.sh

The remote host is affected by the vulnerability described in GLSA-200410-24 MIT krb5: Insecure temporary file use in send-pr.sh The send-pr.sh script creates temporary files in world-writeable directories with predictable names. Impact : A local attacker could create symbolic links in the...

MIT krb5: Insecure temporary file use in send-pr.sh

Background MIT krb5 is the free implementation of the Kerberos network authentication protocol written by the Massachusetts Institute of Technology. Description The send-pr.sh script creates temporary files in world-writeable directories with predictable names. Impact A local attacker could creat...

glibc: Insecure tempfile handling in catchsegv script

Background glibc is a package that contains the GNU C library. Description The catchsegv script creates temporary files in world-writeable directories with predictable names. Impact A local attacker could create symbolic links in the temporary files directory, pointing to a valid file somewhere o...