4142 matches found
CVE-2003-0381
Multiple vulnerabilities in noweb 2.9 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files via multiple vectors including the noroff script...
CVE-2003-0381
CVE-2003-0381 affects noweb 2.9 and earlier. The vulnerability stems from insecure temporary file creation in the noroff script, enabling a local user to overwrite arbitrary files. Public references in Debian DSA-323-1 and the OpenVAS Debian advisory corroborate the issue; no exploitation details...
CVE-2003-0367
znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...
[SECURITY] [DSA-308-1] New gzip packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 308-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 6th, 2003 http://www.debian.org/security/faq -...
gzip znew symbolic links problem
Unsafe temporary files creation...
CVE-2003-0261
fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges...
DEBIAN-CVE-2003-0261
fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges...
CVE-2003-0261
fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges...
CVE-2003-0308
CVE-2003-0308 : The Debian GNU/Linux 3.0 package of Sendmail 8.12.3 does not securely create temporary files, enabling local users to gain additional privileges via the expn, checksendmail, or doublebounce.pl scripts. The issue is due to insecure temporary file handling within these components. E...
CVE-2003-0308
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via 1 expn, 2 checksendmail, or 3 doublebounce.pl...
CVE-2003-0308: Undefined Security Weakness
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via 1 expn, 2 checksendmail, or 3 doublebounce.pl...
[SECURITY] [DSA-305-1] New sendmail packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 305-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 15th, 2003 http://www.debian.org/security/faq -...
CVE-2003-0308
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via 1 expn, 2 checksendmail, or 3 doublebounce.pl...
DEBIAN-CVE-2003-0308
The Sendmail 8.12.3 package in Debian GNU/Linux 3.0 does not securely create temporary files, which could allow local users to gain additional privileges via 1 expn, 2 checksendmail, or 3 doublebounce.pl...
DSA-305 sendmail - insecure temporary files
Bulletin has no description...
CVE-2003-0214
run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0261
CVE-2003-0261 affects fuzz, including version 0.6 and earlier, where the process creates temporary files insecurely. This flaw can allow local users to gain root privileges due to improper secure handling of temporary files. The described impact is local privilege escalation with partial confiden...
CVE-2003-0261
fuzz 0.6 and earlier creates temporary files insecurely, which could allow local users to gain root privileges...