[SECURITY] New versions of cfengine fixes symlink attack

The maintainer of Debian GNU/Linux cfengine package found a error in the way cfengine handles temporary files when it runs the tidy action on homedirectories, which makes it suspectible to a symlink attack. The author has been notified of the problem but has not released a fix yet. We recommend y...

CVE-1999-0458

L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information...

CVE-1999-0342

Linux PAM modules allow local users to gain root access using temporary files...

PT-1998-1081 · Linux · Linux Pam

Name of the Vulnerable Software and Affected Versions: Linux PAM affected versions not specified Description: The issue allows local users to gain root access using temporary files. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-1999-1036

COPS 1.04 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in 1 resdiff, 2 ca.src, and 3 mail.chk...

CVE-1999-1038

Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's default working directory, as defined by the WORKDIR variable...

[SECURITY] New version of premail fixes /tmp file problem

We have received a report that premail uses temporary files in /tmp using unsecure methods for opening them. This is fixed in the new 0.45-4 release. We recommend you upgrade your samba package immediately. dpkg -i file.deb will install the referenced file. Debian GNU/Linux 1.3.1 alias bo Source...

CVE-1999-1095

sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and other programs that use sort...

Solaris 2.5.1 lp and lpsched Symlink Vulnerabilities

Exploit for solaris platform in category local exploits ==================================================== Solaris 2.5.1 lp and lpsched Symlink Vulnerabilities ==================================================== !/bin/sh lpNet & temp file exploit: break lp, then use lp priv to break root or bi...

Solaris 7.0 - aspppd Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/292/info Aspppd is a tool shipped with Solaris for dial up PPP access. This tool creates files in the /tmp directory insecurely in particular /tmp/.asppp.fifo allowing other users to link to these files an possibly elevate their privelages. This program i...

PT-2004-3661 · Postgresql · Postgresql

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 7.4.5 and earlier Description: The issue concerns the make oidjoins check script in PostgreSQL, which allows local users to overwrite files via a symlink attack on temporary files. This can lead to a violation of protected...