RHEL 3 / 4 : Adobe Acrobat Reader (RHSA-2005:575)

Updated acroread packages that fix a security issue are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Acrobat Reader browser allows for the viewing, distributing, and printing of documents in portable document format...

Critical: Red Hat Security Advisory: Adobe Acrobat Reader security update

Updated acroread packages that fix a security issue are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Acrobat Reader browser allows for the viewing, distributing, and printing of documents in portable document format...

security flaw

The control for Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX creates temporary files with the permissions as specified in a user's umask, which could allow local users to read PDF documents of that user if the umask allows it...

CVE-2005-1841

Adobe Reader information-disclosure vulnerability CVE-2005-1841 affects Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX. The issue arises from how temporary files are created in /tmp using the user’s umask, which can allow local users to read the owner’s PDF documents. Connected a...

CVE-2005-1841

The control for Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX creates temporary files with the permissions as specified in a user's umask, which could allow local users to read PDF documents of that user if the umask allows it...

CVE-2005-1841

The control for Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX creates temporary files with the permissions as specified in a user's umask, which could allow local users to read PDF documents of that user if the umask allows it...

CVE-2005-1841: Undefined Security Weakness

The control for Adobe Reader 5.0.9 and 5.0.10 on Linux, Solaris, HP-UX, and AIX creates temporary files with the permissions as specified in a user's umask, which could allow local users to read PDF documents of that user if the umask allows it...

CVE-2005-1916

linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack on temporary files...

CVE-2005-1916

Removed by vendor...

CVE-2005-0393

The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors...

CVE-2005-0393

The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors...

CVE-2005-0393

The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors...

DEBIAN-CVE-2005-0393

The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors...

Centericq symbolic links problem

Symbolic links problem on temporary files creation...

log4sh symbolic links problem

Symbolic links problem during temporary files creation...

[Full-disclosure] log4sh insecure temporary file creation

log4sh insecure temporary file creation Vendor: http://forestent.com/products/log4sh/ Advisory: http://www.zataz.net/adviso/log4sh-06092005.txt Vendor informed: yes Exploit available: no Impact : low Exploitation : low The vulnerabilities are caused due to temporary file being created insecurely...

CVE-2005-0393

CVE-2005-0393 affects crip, a terminal-based ripper/encoder/tagger tool. The advisory notes that crip 3.5 helper scripts do not securely use temporary files, allowing local users to exploit this in an insecure manner with unknown impact and attack vectors. The Debian DSA-733-1 and OpenVAS entry c...

CVE-2005-0393

The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors...

CVE-2005-0393

The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors...

CVE-2005-0393: Undefined Security Weakness

The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors...