Gentoo Security Advisory GLSA 200803-11 (vobcopy)

The remote host is missing updates announced in advisory GLSA 200803-11. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200803-11 : Vobcopy: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200803-11 Vobcopy: Insecure temporary file creation Joey Hess reported that vobcopy appends data to the file '/tmp/vobcopy.bla' in an insecure manner. Impact : A local attacker could exploit this vulnerability to conduct symlink...

[ GLSA 200803-11 ] Vobcopy: Insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200803-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

CVE-2007-5718

vobcopy 0.5.14 allows local users to append data to an arbitrary file, or create an arbitrary new file, via a symlink attack on the 1 /tmp/vobcopy.bla or 2 /tmp/vobcopy0.5.14.log temporary file...

CVE-2007-5718

CVE-2007-5718 affects vobcopy up to version 0.5.14. A local attacker can exploit insecure temporary file handling (creating/appending to /tmp/vobcopy.bla or /tmp/vobcopy_0.5.14.log) via a symlink attack to write to arbitrary files with the privileges of the running user. The vulnerability arises ...