CVE-2002-0121: Undefined Security Weakness

PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections...

CVE-2001-0906: Undefined Security Weakness

teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvi files using lpr...

Acrobat reader 4.05 temporary files

------------------------------------------------------------ Insecure temporary files in Acrobat Reader 4.05 [email protected] $Date: 2002/06/20 07:21:29 $ ------------------------------------------------------------ Author: Jarno Huuskonen [email protected] Discovered: Wed 18 Jul 2001...

Multiple bugs in Caldera OpenServer utilities

Symlink problem on temporary files handling in sort and scoadmin...

Security Update: [CSSA-2002-SCO.21] OpenServer 5.0.5 OpenServer 5.0.6 : sort command creates temporary files insecurely

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: OpenServer 5.0.5 OpenServer 5.0.6 : sort command creates temporary files insecurely Advisory number: CSSA-2002-SCO.21 Issue date: 2002 May 28 Cross reference: 1...

Security Update: [CSSA-2002-SCO.22] OpenServer 5.0.5 OpenServer 5.0.6 : scoadmin command creates temporary files insecurely

To: [email protected] [email protected] [email protected] Caldera International, Inc. Security Advisory Subject: OpenServer 5.0.5 OpenServer 5.0.6 : scoadmin command creates temporary files insecurely Advisory number: CSSA-2002-SCO.22 Issue date: 2002 May 28 Cross reference...

Caldera OpenServer 5.0.55.0.6 - SCOAdmin Symbolic Link

Caldera OpenServer 5.0.55.0.6 - SCOAdmin Symbolic Link source: https://www.securityfocus.com/bid/4875/info A vulnerability has been reported in the scoadmin utility that may allow a local attacker to overwrite any file. The vulnerability is due to the predictable naming of temporary files used by...

Caldera OpenServer 5.0.5/5.0.6 - SCOAdmin Symbolic Link

source: https://www.securityfocus.com/bid/4875/info A vulnerability has been reported in the scoadmin utility that may allow a local attacker to overwrite any file. The vulnerability is due to the predictable naming of temporary files used by scoadmin. When writing to temporary files, there are n...

Weak permissions in gaim

During message reading world readable file is created in /tmp...

NTFS encryption information leakage problem in PGP

If "wiping file on deletion" option is used EFS temporary files are not deleted during file encryption...

CVE-2001-1333

Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that could allow local users to overwrite files...

CVE-2001-1346

ARCserveIT 6.61 and 6.63 (ARCservIT) are affected by a local vulnerability where an attacker can overwrite arbitrary files via a symlink attack on temporary files (asagent.tmp or inetd.tmp). The underlying issue is insecure handling of temporary files leading to local privilege impact with partia...

CVE-2001-1333

CVE-2001-1333 affects Linux CUPS prior to 1.1.6 where temporary files are not securely handled, enabling local users to overwrite files via a symlink vulnerability. The NVD data lists a local attack vector, high attack complexity, no authentication, no confidentiality impact, but partial integrit...

CVE-2002-0271

CVE-2002-0271 affects the GNU Ada compiler (GNAT) versions 3.12p through 3.14p. The issue arises from a symlink attack on temporary files, allowing local users to modify files belonging to other users. The resulting impact is limited to integrity (partial) and requires local access; no remote or ...

CVE-2001-1256

kmmodreg in HP-UX 11.11, 11.04 and 11.00 allows local users to create arbitrary world-writeable files via a symlink attack on the 1 /tmp/.kmmodreglock and 2 /tmp/kmpath.tmp temporary files...

Weak permissions in Tarantella temporary files

World-writable temporary file created with name available via prosess list...

CVE-2001-0416

sgml-tools aka sgmltools before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that are being processed by sgml-tools...

CVE-2001-0416

CVE-2001-0416 affects sgml-tools (sgmltools) prior to version 1.0.9-15. The root cause is insecure handling of temporary files: sgml-tools creates temporary files directly (or in insecure permissions) which can allow other local users to read files being processed. Impact is partial confidentiali...

CVE-2001-0774

Tripwire 1.3.1, 2.2.1 and 2.3.0 are vulnerable to a local symlink attack that can overwrite arbitrary files in /tmp and may enable privilege escalation. Root cause: temporary files are opened/created without O_EXCL and with predictable names, allowing a non-privileged local attacker to redirect d...

CVE-2001-0416: Undefined Security Weakness

sgml-tools aka sgmltools before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that are being processed by sgml-tools...