Gentoo Security Advisory GLSA 200803-26 (acroread)

The remote host is missing updates announced in advisory GLSA 200803-26. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200501-31 (teTeX)

The remote host is missing updates announced in advisory GLSA 200501-31. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200409-05 (Gallery)

The remote host is missing updates announced in advisory GLSA 200409-05. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200809-13 : R: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200809-13 R: Insecure temporary file creation Dmitry E. Oboukhov reported that the 'javareconf' script uses temporary files in an insecure manner. Impact : A local attacker could exploit this vulnerability to overwrite arbitrary...

DEBIAN-CVE-2008-4108

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

Directory traversal

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

CVE-2008-4108

Tools/faqwiz/move-faqwiz.sh aka the generic FAQ wizard moving tool in Python 2.4.5 might allow local users to overwrite arbitrary files via a symlink attack on a tmp$RANDOM.tmp temporary file. NOTE: there may not be common usage scenarios in which tmp$RANDOM.tmp is located in an untrusted directo...

CVE-2008-4108

Removed by vendor...

GLSA-200809-08 : Amarok: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200809-08 Amarok: Insecure temporary file creation Dwayne Litzenberger reported that the MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp uses the albuminfo.xml temporary file in an insecure...

Fedora 8 : xastir-1.9.2-8.fc8 (2008-7269)

Multiple insecure temporary file usage flaws were identified in the get- maptools.sh and getshapelib.sh scripts shipped in xastir packages. As those scripts are not needed with Fedora-distributed xastir packages they automate installation of libraries used by xastir, which are provided in the...

Amarok: Insecure temporary file creation

Background Amarok is an advanced music player. Description Dwayne Litzenberger reported that the MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp uses the albuminfo.xml temporary file in an insecure manner. Impact A local attacker could perform a symlink...

Design/Logic Flaw

migratealiases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-3928

test.sh in Honeyd 1.5c might allow local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-3929

gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file...

CVE-2008-3929

gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file...

CVE-2008-3930

migratealiases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-3930

migratealiases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2008-3929

gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file...

CVE-2008-3930

Removed by vendor...

FreeBSD Ports: mod_dosevasive20

The remote host is missing an update to the system as announced in the referenced advisory. VID 88ff90f2-6e43-11d9-8c87-000a95bc6fae OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...