4318 matches found
CVE-2005-0069
The 1 tcltags or 2 vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files...
[SECURITY] [DSA 661-1] New f2c packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 661-1 [email protected] http://www.debian.org/security/ Martin Schulze January 27th, 2005 http://www.debian.org/security/faq -...
f2c -- insecure temporary files
Javier Fernández-Sanguino Peña reports two temporary file vulnerability within f2c. The vulnerabilities are caused due to weak temporary file handling. An attacker could create an symbolic link, causing a local user running f2c to overwrite the symlinked file. This could give the attacker elevate...
Debian DSA-661-2 : f2c - insecure temporary files
Dan McMahill noticed that our advisory DSA 661-1 did not correct the multiple insecure files problem, hence, this update. For completeness below is the original advisory text : Javier Fernandez-Sanguino Pena from the Debian Security Audit project discovered that f2c and fc, which are both part of...
DSA-658-1 libdbi-perl - insecure temporary file
Bulletin has no description...
[SA13970] FireHOL Insecure Temporary File Creation Vulnerabilities
TITLE: FireHOL Insecure Temporary File Creation Vulnerabilities SECUNIA ADVISORY ID: SA13970 VERIFY ADVISORY: http://secunia.com/advisories/13970/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: FireHOL 1.x http://secunia.com/product/4556/ DESCRIPTION: Sam Coute...
CVE-2004-1181
CVE-2004-1181 corresponds to the Debian htmlheadline issue (DSA-622-1) involving insecure temporary files that allow local users to overwrite arbitrary files via a symlink attack. Public details in connected docs identify the vulnerable component as htmlheadline, with the root cause stemming from...
[SA13933] Ghostscript Various Scripts Insecure Temporary File Creation
TITLE: Ghostscript Various Scripts Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13933 VERIFY ADVISORY: http://secunia.com/advisories/13933/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Ghostscript 8.x http://secunia.com/product/4550/ DESCRIPTION:...
kdelibs -- insecure temporary file creation
Davide Madrisan reports: The dcopidlng' script in the KDE library package kdelibs-3.3.2/dcop/dcopidlng/dcopidlng creates temporary files in a unsecure manner. Note: dcopidlng is only used at build time, so only users installing KDE are vulnerable, not users already running KDE...
Opened attachments are temporarily saved world-readable — Mozilla
Mozilla software released after March 2004 saves some temporary files with world-readable permissions. In the browser this is primarily content fed to helper applications for example, PDF files, and in the mail clients it is attachments...
USN-65-1: Apache utility script vulnerability
Javier Fernández-Sanguino Peña noticed that the "checkforensic" script created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the program...
CVE-2005-0004: Improper Link Resolution Before File Access
The mysqlaccess script in MySQL 4.0.23 and earlier, 4.1.x before 4.1.10, 5.0.x before 5.0.3, and other versions including 3.x, allows local users to overwrite arbitrary files or read temporary files via a symlink attack on temporary files...
PT-2005-1141 · Oracle +2 · Mysql Server +2
Name of the Vulnerable Software and Affected Versions: MySQL versions 3.x and earlier MySQL versions 4.0.23 and earlier MySQL versions 4.1.x before 4.1.10 MySQL versions 5.0.x before 5.0.3 Description: The issue allows local users to overwrite arbitrary files or read temporary files via a symlink...
security flaw
The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...
[SECURITY] [DSA 647-1] New mysql packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 647-1 [email protected] http://www.debian.org/security/ Martin Schulze January 19th, 2005 http://www.debian.org/security/faq -...
USN-63-1: MySQL client vulnerability
Javier Fernández-Sanguino Peña noticed that the "mysqlaccess" program created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the program...
USN-61-1: vim vulnerabilities
Javier Fernández-Sanguino Peña noticed that the auxillary scripts "tcltags" and "vimspell.sh" created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the script either by calling it...
Debian DSA-647-1 : mysql - insecure temporary files
Javier Fernandez-Sanguino Pena from the Debian Security Audit Project discovered a temporary file vulnerability in the mysqlaccess script of MySQL that could allow an unprivileged user to let root overwrite arbitrary files via a symlink attack and could also could unveil the contents of a tempora...
[SA13867] MySQL mysqlaccess Script Insecure Temporary File Creation
TITLE: MySQL mysqlaccess Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13867 VERIFY ADVISORY: http://secunia.com/advisories/13867/ CRITICAL: Less critical IMPACT: Manipulation of data, Exposure of sensitive information, Privilege escalation WHERE: Local system SOFTWARE: MySQL 4.x...
