4142 matches found
CVE-2003-0214
run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
DSA-292-2 mime-support - insecure temporary file creation
Bulletin has no description...
Symbolic links problem in mime-support
Symbolic links problem on temporary files...
DSA-292-1 mime-support - insecure temporary file creation
Bulletin has no description...
CVE-2003-0207
CVE-2003-0207 affects the ps2epsi component in gs-common. The root cause is insecure creation of temporary files when ps2epsi invokes ghostscript, which can allow a local attacker to overwrite arbitrary files. The vulnerability is documented in Debian DSA-286-1 and is reflected in multiple feeds ...
CVE-2003-0207
ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary files...
CVE-2003-0207: Undefined Security Weakness
ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary files...
ghostscript symbolic link problem
Symboli link problem during temporary files creation in ps2epsi...
CVE-2002-0788
CVE-2002-0788 involves the PGP 7.0.3 client when used with Windows Encrypted File System (EFS) and the “wipe deleted files” option. The interaction creates cleartext temporary files that cannot be wiped or deleted due to strong permissions, potentially exposing cleartext data to local users or at...
CVE-2001-1301
Technical details about CVE-2001-1301 are not publicly provided in the connected documents. The supplied materials only reiterate the generic symlink-attack description; monitor for updates.
CVE-2001-1378
fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files...
CVE-2002-0658
OSSP mm library libmm before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack...
CVE-2002-0788
An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System EFS, creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain...
CVE-2002-0658
CVE-2002-0658 affects OSSP mm library (libmm) prior to 1.2.0. The vulnerability allows the local Apache user to gain privileges via temporary files, potentially through a symlink attack. Debian advisory DSA-137 and OpenVAS entries confirm mm-related remediation guidance and show the vulnerability...
CVE-2002-0658
OSSP mm library libmm before 1.2.0 allows the local Apache user to gain privileges via temporary files, possibly via a symbolic link attack...
CVE-2001-1378
The CVE-2001-1378 issue affects fetchmailconf in fetchmail prior to 5.7.4, where a symlink attack on temporary files allows local users to overwrite files owned by other users. The root cause is improper handling of temporary files during configuration, enabling a local, non-privileged user to le...
CVE-2002-0788: Incomplete Cleanup
An interaction between PGP 7.0.3 with the "wipe deleted files" option, when used on Windows Encrypted File System EFS, creates a cleartext temporary files that cannot be wiped or deleted due to strong permissions, which could allow certain local users or attackers with physical access to obtain...
CVE-2002-1550
dumpsmutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files...
S-plus /tmp usage
INTRODUCTION S-PLUS is a Statistical analysis, graphics and programming tool http://www.statsci.com/ http://www.insightful.com/ PROBLEM As installed on UNIX machines, Splus uses files in /tmp in an unsafe way. DETAILS The main Sqpe binary, and various shell script modules, use files in /tmp:...