EUVD-2010-4308

Malware in sbrugna...

SUSE CVE-2011-5271

Pacemaker before 1.1.6 configure script creates temporary files insecurely...

SUSE CVE-2012-1088

iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by 1 configure or 2 examples/dhcp-client-script...

SUSE CVE-2014-3981

acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file...

DEBIAN-CVE-2011-5271

Pacemaker before 1.1.6 configure script creates temporary files insecurely...

CVE-2011-5271

Pacemaker before 1.1.6 configure script creates temporary files insecurely...

CVE-2011-5271

Pacemaker before 1.1.6 configure script creates temporary files insecurely...

CVE-2011-5271

Pacemaker before 1.1.6 configure script creates temporary files insecurely...

CVE-2011-5271

Pacemaker before 1.1.6 configure script creates temporary files insecurely...

CVE-2011-5271

Pacemaker before 1.1.6 configure script creates temporary files insecurely...

CVE-2011-5271: Improper Link Resolution Before File Access

Pacemaker before 1.1.6 configure script creates temporary files insecurely...

PT-2019-6716

Name of the Vulnerable Software and Affected Versions Pacemaker versions prior to 1.1.6 Description The configure script in Pacemaker creates temporary files insecurely. Recommendations For versions prior to 1.1.6, update to version 1.1.6 or later to resolve the issue...

[oss-security] Re: CVE request: PHP configure script and Lynis tool /tmp/ issues reported on full disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 39 if "$OS" = "AIX" ; then 40 TMPFILE=/tmp/lynis.$$ We can make a CVE assignment corresponding to your disclosure of this lynis.$$ issue on oss-security. Use CVE-2014-3982. A CVE for this most likely won't or shouldn't have a...

[oss-security] CVE request: PHP configure script and Lynis tool /tmp/ issues reported on full disclosure

Good morning, http://seclists.org/fulldisclosure/2014/Jun/21 reports two temporary file issues. The first is in PHP's configure script: char filename = "/tmp/phpglibccheck"; Red Hat bug: https://bugzilla.redhat.com/showbug.cgi?id=1104978 The second issue is Lynis writing a predictable file to...

CVE-2014-3981

acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file...

CVE-2014-3981

CVE-2014-3981 affects PHP 5.5.13 and earlier. The vulnerability arises from the acinclude.m4 usage in the configure script, enabling a local user to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file. Impact is local privilege-related, enabling file tampering. The provi...

CVE-2014-3981

acinclude.m4, as used in the configure script in PHP 5.5.13 and earlier, allows local users to overwrite arbitrary files via a symlink attack on the /tmp/phpglibccheck file...

PT-2014-1416 · Php +1 · Php +1

Name of the Vulnerable Software and Affected Versions: PHP versions 5.5.13 and earlier Description: The issue allows a local user to overwrite arbitrary files by exploiting a symlink attack on the /tmp/phpglibccheck file. This is due to a vulnerability in acinclude.m4, which is used in the...

CVE-2012-1088

iproute2 before 3.3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by 1 configure or 2 examples/dhcp-client-script...

PT-2014-2216 · Iproute2 · Iproute2

Name of the Vulnerable Software and Affected Versions: iproute2 versions prior to 3.3.0 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by certain scripts. This can be exploited through the configure script or the...