4318 matches found
PT-2005-3221 · Oracle · Oracle Forms
Name of the Vulnerable Software and Affected Versions: Oracle Forms versions 9.0.4 Description: The issue allows local users to obtain sensitive database information because database usernames and passwords are stored in a temporary file that is not properly deleted after use. Recommendations: Fo...
Skype communicator symbolic links problem
Symbolic links problem on temporary files creation...
CVE-2001-1530
run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands...
CVE-2001-1530
CVE-2001-1530 affects Webmin 0.80 and 0.88. The vulnerability is in run.cgi, which creates temporary files with world-writable permissions. This allows local users to execute arbitrary commands. The connected Red Hat/Nessus entries corroborate the effect, describing the same root cause and impact...
FreeBSD : portupgrade -- insecure temporary file handling vulnerability (22f00553-a09d-11d9-a788-0001020eed82)
Simon L. Nielsen discovered that portupgrade handles temporary files in an insecure manner. This could allow an unprivileged local attacker to execute arbitrary commands or overwrite arbitrary files with the permissions of the user running portupgrade, typically root, by way of a symlink attack...
FreeBSD : net-snmp -- fixproc insecure temporary file creation (3e0072d4-d05b-11d9-9aed-000e0c2e438a)
A Gentoo advisory reports : Net-SNMP creates temporary files in an insecure manner, possibly allowing the execution of arbitrary code. A malicious local attacker could exploit a race condition to change the content of the temporary files before they are executed by fixproc, possibly leading to th...
FreeBSD : groff -- groffer uses temporary files unsafely (169f422f-bd88-11d9-a281-02e018374e71)
The groffer script in the groff package 1.18 and later versions allows local users to overwrite files via a symlink attack on temporary files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database...
Heartbeat symbolic links problem
Smlink problems on temporary files creation in different code fragments...
DSA-754-1 centericq - insecure temporary file
Bulletin has no description...
CVE-2005-2231
High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
DEBIAN-CVE-2005-2231
High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2231
High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2231
High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2231
High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
Sukria backup manager weak repository permissions
Repository is world readable. Insecure temporary files creation...
xpvm symbolic links problem
Symbolic links problem in xpvm.tcl during temporary files creation...
CVE-2005-2211
CVE-2005-2211 affects Backup Manager 0.5.8a, where insecure temporary file creation enables local users to perform unauthorized file operations during CD burning. The description across multiple sources confirms the root cause as insecure handling of temporary files, leading to potential partial ...
CVE-2005-2211
Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is burning a CDR...
CVE-2005-2211
Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is burning a CDR...
CVE-2005-2211: Undefined Security Weakness
Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is burning a CDR...