Allaire ColdFusion Server 4.04.0.1 - CFCACHE Information Disclosure

Allaire ColdFusion Server 4.04.0.1 - CFCACHE Information Disclosure source: https://www.securityfocus.com/bid/917/info ColdFusion 4.x includes a function called CFCACHE. This function improves server performance by caching the HTML output of processed CFM pages. When the CFCACHE tag is used in a...

Allaire ColdFusion Server 4.0/4.0.1 - 'CFCACHE' Information Disclosure

source: https://www.securityfocus.com/bid/917/info ColdFusion 4.x includes a function called CFCACHE. This function improves server performance by caching the HTML output of processed CFM pages. When the CFCACHE tag is used in a CFM page, it creates temporary files. Some of these files are .tmp...

IRIX 6.5.x - usrlibInPersoninpview Race Condition

IRIX 6.5.x - usrlibInPersoninpview Race Condition / source: https://www.securityfocus.com/bid/1530/info Certain versions of IRIX ship with a version of inpview that creates files in '/var/tmp/' in an insecure manner and is therefore prone to a race condition. InPerson's 'inpview' is a networked...

IRIX 6.5.x - '/usr/lib/InPerson/inpview' Race Condition

/ source: https://www.securityfocus.com/bid/1530/info Certain versions of IRIX ship with a version of inpview that creates files in '/var/tmp/' in an insecure manner and is therefore prone to a race condition. InPerson's 'inpview' is a networked multimedia conferencing tool. InPerson provides...

unixware.netstation.txt

Greetings, OVERVIEW A vulnerability in IBM's Network Station Manager will allow any local user to gain root privileges. BACKGROUND Though I only tested NetStation on UnixWare 7.1, I would imagine that this vulnerability is present on most NetStation implementations. This daemon is installed/runni...

IBM Network Station Manager 2.0 R1 - Race Condition

IBM Network Station Manager 2.0 R1 - Race Condition // source: https://www.securityfocus.com/bid/900/info IBM's Network Station Manager is a client/server application which facilitates management for IBM Network Stations. It is possible to locally gain root priviliges on hosts running the...

CVE-1999-0342

CVE-1999-0342 : The vulnerability affects Linux PAM modules, described as allowing local users to gain root access using temporary files. The connected sources corroborate a local privilege escalation in PAM, but do not specify affected distributions, versions, or a concrete patch/fix. No exploit...

CVE-1999-0458

L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information...

CVE-1999-0342

Linux PAM modules allow local users to gain root access using temporary files...

rootcron.txt

!/bin/sh clear echo '------------------------------------------------------------------' echo 'Marchew Hyperreal Industries ' echo 'Stumilowy Las Team ' echo '---------------------------- presents ----------------------------' echo echo ' -= vixie-cron root sploit by Michal Zalewski =-' echo echo...

midnight.commander.4.x.tmp.race.txt

ate: Sun, 7 Mar 1999 01:41:25 +0100 From: Michal Zalewski Midnight Commander 4.x bugs x2 Still not fixed. Temporary files mc are created in insecure way, allowing typical races. Also, entering directories containing $... somewhere might result in execution of embeeded code. Described days ago,...

netscape4.5-nsform.tmp.txt

02-FEB-99 - http://www.skylab.org/netscape/index.html Yet another browser bug was found late last week. This time in Netscape's Communicator 4.5. The problem appears with the way Netscape handles forms. In many cases, the browser will store data entered on a FORM in C:\WINDOWS\TEMP in a NSFORM.TM...

cfengine.symlink.txt

Date: Tue, 16 Feb 1999 01:12:20 +0100 From: Wichert Akkerman To: [email protected] Subject: SECURITY New versions of cfengine fixes symlink attack -----BEGIN PGP SIGNED MESSAGE----- The maintainer of Debian GNU/Linux cfengine package found a error in the way cfengine handles temporary files wh...

xfs.txt

Bug in xfs Lukasz Trabinski [email protected] Tue, 30 Mar 1999 00:14:34 +0200 Hello, I hope that's information will be useful for making new patch for XFree86. I found bug in xfs Packet XFree86-xfs-3.3.3.1-1 in RedHat 5.1 and probably in RedHat 5.2 updates, too Xfs is a font server for...

aix.enetwork.firewall.txt

Date: Tue, 25 May 1999 20:33:53 +0100 From: Paul Cammidge To: [email protected] Subject: IBM eNetwork Firewall for AIX The IBM eNetwork Firewall for AIX contains some poorly written scripts, which create temporary files in /tmp without making any attempt to validate the existance of the file...

lynxtmp.txt

Date: Tue, 9 Feb 1999 20:57:30 -0500 From: Juan Diego Bolanos To: [email protected] Subject: Lynx /tmp problem Hi Aleph, please filter this if already posted.... ------ Hello.... I have found a bug in Lynx all versions, except the latest stable release... lynx create temporary files in /tmp in...

CVE-1999-0970

The OmniHTTPD visadmin.exe program allows a remote attacker to conduct a denial of service via a malformed URL which causes a large number of temporary files to be created...

Omnicron OmniHTTPd 1.12.0 Alpha 1 - visiadmin.exe Denial of Service

Omnicron OmniHTTPd 1.12.0 Alpha 1 - visiadmin.exe Denial of Service source: https://www.securityfocus.com/bid/1808/info OmniHTTPD is a web-server offered by Omnicron for the MS Windows platform. One of the CGI utilities it ships with and installs by default contains a bug that could, if exploited...

G. Wilford man 2.3.10 - Symlink

source: https://www.securityfocus.com/bid/305/info The man command created a temporary file under /tmp with a predictable name and is willing to follow symbolic links. This may allow malicious local users to create arbitrarily named files. zsoelim1 is a utility part of the man package which...

IBM AIX 4.2.1 - snap Insecure Temporary File Creation

IBM AIX 4.2.1 - snap Insecure Temporary File Creation source: https://www.securityfocus.com/bid/375/info The snap command is a diagnostic utlitiy for gathering system information on AIX platforms. It can only be executed by root, but it copies various system files into /tmp/ibmsupt/ under...