Debian DSA-733-1 : crip - insecure temporary files

Justin Rye discovered that crip, a terminal-based ripper, encoder and tagger tool, utilises temporary files in an insecure fashion in its helper scripts. The old stable distribution woody does not provide the crip package. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

[SECURITY] [DSA 733-1] New crip packages fix insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 733-1 [email protected] http://www.debian.org/security/ Martin Schulze June 30th, 2005 http://www.debian.org/security/faq -...

DSA-733-1 crip - insecure temporary files

Bulletin has no description...

Adobe Reader for Linux symbolic links problem

Symbolic links problem on temporary files creation...

acroread -- insecure temporary file creation

Secunia Research reports: Secunia has discovered a security issue in Adobe Reader for Linux, which can be exploited by malicious, local users to gain knowledge of sensitive information. The problem is caused due to temporary files being created with permissions based on a user's umask in the "/tm...

CVE-2002-1838

Charities.cron 1.0.2 through 1.6.0 allows local users to write to arbitrary files via a symlink attack on temporary files...

CVE-2005-1759

Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack on temporary files after they have been created, a different vulnerability than CVE-2005-1751...

CVE-2005-1759

Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack on temporary files after they have been created, a different vulnerability than CVE-2005-1751...

DEBIAN-CVE-2005-1759

Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack on temporary files after they have been created, a different vulnerability than CVE-2005-1751...

CVE-2002-1764

acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2002-1764

CVE-2002-1764 affects acroread/Adobe Reader 4.05 on Linux . The vulnerability is a local file overwrite via a symlink attack on temporary files, enabling a local user to overwrite arbitrary files. The connected OpenVAS entry corroborates a symlink attack vulnerability in Adobe Reader. No further ...

[Full-disclosure] [ GLSA 200506-13 ] webapp-config: Insecure temporary file handling

Gentoo Linux Security Advisory GLSA 200506-13 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

Gentoo Linux webapp-config symbolic links problem

Symbolic links problem on temporary files creation...

GNU shtool, ocaml-mysql: Insecure temporary file creation

Background GNU shtool is a compilation of small shell scripts into a single shell tool. The ocaml-mysql package includes the GNU shtool code. Description Eric Romang has discovered that GNU shtool insecurely creates temporary files with predictable filenames CAN-2005-1751. On closer inspection,...

AIX 5.2 : IY59206

The remote host is missing AIX Critical Security Patch number IY59206 /SBIN/RC.BOOT INSECURELY HANDLES TEMPORARY FILES.. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

xmysqladmin MySQL administration utility symbolic links problem

Unsafe temporary files creation...

MacOS X launchd synbolic links race conditions

Unsafe temporary files creation...

AIX 5.1 : IY59207

The remote host is missing AIX Critical Security Patch number IY59207 /SBIN/RC.BOOT INSECURELY HANDLES TEMPORARY FILES.. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Everybuddy translation script symbolic links problem

Symbolic links problem during temporary files creation...

openssl, openssl096b security update

CentOS Errata and Security Advisory CESA-2005:476 Updated OpenSSL packages that fix security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. OpenSSL is a toolkit that implements Secure Sockets Layer SSL v2/v3 and...