CVE-2008-5089: Undefined Security Weakness

Multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control arview2.ocx in Data Dynamics ActiveReports 2.5.0.1314 allow remote attackers to overwrite arbitrary files via a call to the 1 Pages.Save, 2 PrintReport, or 3 Canvas.Save method...

Chilkat Crypt ActiveX Control 'ChilkatCrypt2.dll' File Overwrite Vulnerability

Chilkat Crypt is prone to an ActiveX Control based arbitrary file overwrite vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-4997: Improper Link Resolution Before File Access

dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. NOTE: the vendor disputes this vulnerability, stating that the vector is solely "an EXAMPLE used in the manpage...

CVE-2008-4996: Improper Link Resolution Before File Access

init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor disputes this vulnerability, stating that "init is used in a single-user context; there's no possibility that this is exploitable...

CVE-2008-4982

rkhunter in rkhunter 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rkhunter-debug temporary file. NOTE: this is probably a different vulnerability than CVE-2005-1270...

CVE-2008-4988

pscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal temporary file...

DEBIAN-CVE-2008-4972

mailgo in mgt 2.31 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mailgo temporary file...

CVE-2008-4968

The CVE-2008-4968 entry concerns lmbench (version 3.0-a7) where the rccs and STUFF scripts insecurely handle /tmp/sdiff.##### temporary files, enabling local attackers to perform symlink attacks and overwrite arbitrary files with the invoking user’s privileges. Documentation consistently cites lo...

CVE-2008-4973: Improper Link Resolution Before File Access

i2myspell in myspell 3.1 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/i2my.1 and 2 /tmp/i2my.2 temporary files...

CVE-2008-4982: Improper Link Resolution Before File Access

rkhunter in rkhunter 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rkhunter-debug temporary file. NOTE: this is probably a different vulnerability than CVE-2005-1270...

CVE-2008-4980: Improper Link Resolution Before File Access

delqueueask in rccp 0.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cccptmp.txt temporary file...

CVE-2008-4981: Improper Link Resolution Before File Access

perl.robot in realtimebattle 1.0.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl.robot.log temporary file...

CVE-2008-4943

bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/error.txt, b /tmp/errores.txt, and possibly other temporary files, related to the 1 creabulmafact, 2 creabulmacont, and possibly 3 actualizabulmacont, 4 installbulmages-db, and 5...

Design/Logic Flaw

aegis 4.24 and aegis-web 4.24 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/, b /tmp/.intro, c /tmp/aegis..ae, d /tmp/aegis., e /tmp/aegis..1, f /tmp/aegis..2, g /tmp/aegis..log, and h /tmp/aegis..out temporary files, related to the 1 bngdvlpd.sh, 2 bngrvwd.sh, 3...

Code injection

apertium 3.0.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.lex.cc, b /tmp/.deformat.l, c /tmp/.reformat.l, d /tmp/docxorig, e /tmp/docxsalida.zip, f /tmp/xlsxembed, g /tmp/xlsxorig, and h /tmp/xslxsalida.zip temporary files, related to the 1...

Remote code execution

webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter. NOTE: this can be leveraged for code execution by writing to a file under the web...

PT-2008-6109 · Aview +1 · Aview +1

Name of the Vulnerable Software and Affected Versions: aview version 1.3.0 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview.pgm temporary file created by asciiview in aview. Recommendations: For aview version 1.3.0, consider restricting...

CVE-2008-4960: Improper Link Resolution Before File Access

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/-tmp.ps and 2 /tmp/bboxx- temporary files...

CVE-2008-4936: Improper Link Resolution Before File Access

faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp. temporary file...

CVE-2008-4932: Improper Input Validation

webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter. NOTE: this can be leveraged for code execution by writing to a file under the web...