Lucene search
K

8 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 6:20 a.m.1 views

SUSE CVE-2004-0968

The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files...

2.1CVSS6.5AI score0.00072EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2008/09/24 12:0 a.m.20 views

Gentoo Security Advisory GLSA 200410-19 (glibc)

The remote host is missing updates announced in advisory GLSA 200410-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.1CVSS6.7AI score0.00072EPSS
Exploits0References3
OSV
OSV
added 2005/02/09 5:0 a.m.1 views

DEBIAN-CVE-2004-0968

The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files...

2.1CVSS6.1AI score0.00072EPSS
Exploits0References1
OSV
OSV
added 2005/01/12 12:0 a.m.21 views

DSA-636-1 glibc - insecure temporary files

Bulletin has no description...

2.1CVSS6.3AI score0.00072EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2004/12/20 6:14 p.m.3 views

security flaw

The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files...

2.1CVSS5.8AI score0.00072EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2004/10/21 12:0 a.m.35 views

GLSA-200410-19 : glibc: Insecure tempfile handling in catchsegv script

The remote host is affected by the vulnerability described in GLSA-200410-19 glibc: Insecure tempfile handling in catchsegv script The catchsegv script creates temporary files in world-writeable directories with predictable names. Impact : A local attacker could create symbolic links in the...

2.1CVSS5.5AI score0.00072EPSS
Exploits0References2
Gentoo Linux
Gentoo Linux
added 2004/10/21 12:0 a.m.29 views

glibc: Insecure tempfile handling in catchsegv script

Background glibc is a package that contains the GNU C library. Description The catchsegv script creates temporary files in world-writeable directories with predictable names. Impact A local attacker could create symbolic links in the temporary files directory, pointing to a valid file somewhere o...

2.1CVSS6.1AI score0.00072EPSS
Exploits0
CVE
CVE
added 2004/10/20 4:0 a.m.109 views

CVE-2004-0968

CVE-2004-0968 concerns glibc (catchsegv) and related scripts: in glibc 2.3.2 and earlier, local users could cause a symlink attack on temporary files and overwrite them. The issue is documented across multiple advisories (CAN-2004-0968; CAN-2004-1382; CVE-2004-1453) and modules referencing glibc ...

2.1CVSS5.8AI score0.00072EPSS
Exploits0References10Affected Software1
Rows per page
Query Builder