4317 matches found
[SECURITY] [DSA 622-1] New htmlheadline package fixes insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 622-1 [email protected] http://www.debian.org/security/ Martin Schulze January 3rd, 2005 http://www.debian.org/security/faq -...
Debian DSA-622-1 : htmlheadline - insecure temporary files
Javier Fernandez-Sanguino Pena from the Debian Security Audit Project has discovered multiple insecure uses of temporary files that could lead to overwriting arbitrary files via a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
DSA-622-1 htmlheadline - insecure temporary files
Bulletin has no description...
DEBIAN-CVE-2004-2265
UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact...
CVE-2004-2265
UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact...
CVE-2004-2473
wmFrog weather monitor 0.1.6 and other versions before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-1296
The 1 eqn2graph and 2 pic2graph scripts in groff 1.18.1 allow local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-2265
UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact...
DEBIAN-CVE-2004-1382
The glibcbug script in glibc 2.3.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2004-0968...
CVE-2004-2265
UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact...
DEBIAN-CVE-2004-1296
The 1 eqn2graph and 2 pic2graph scripts in groff 1.18.1 allow local users to overwrite arbitrary files via a symlink attack on temporary files...
[SECURITY] [DSA 620-1] New perl packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 620-1 [email protected] http://www.debian.org/security/ Martin Schulze December 30th, 2004 http://www.debian.org/security/faq -...
astats symbolic links problem
Symboli links problem on temporary files creation...
DSA-620-1 perl - insecure temporary files / directories
Bulletin has no description...
DEBIAN-CVE-2004-1377
The 1 fixps aka fixps.in and 2 psmandup aka psmandup.in scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files...
USN-51-1: teTeX auxiliary script vulnerability
Javier Fernández-Sanguino Peña noticed that "xdvizilla", an auxiliary script to integrate DVI file viewing in Mozilla-based browsers, created temporary files and directories in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges o...
CVE-2004-1336
The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2004-1336
The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack...
[SECURITY] [DSA 615-1] New debmake package fixes insecure temporary directories
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 615-1 [email protected] http://www.debian.org/security/ Martin Schulze December 22nd, 2004 http://www.debian.org/security/faq -...
Debian DSA-615-1 : debmake - insecure temporary files
Javier Fernandez-Sanguino Pena from the Debian Security Audit Project noticed that the debstd script from debmake, a deprecated helper package for Debian packaging, created temporary directories in an insecure manner. This can be exploited by a malicious user to overwrite arbitrary files owned by...