Mandriva Linux Security Advisory : R-base (MDVSA-2008:198)

A symlink vulnerability was found in the javareconf script in R that allows local users to overwrite arbitrary files CVE-2008-3931. The updated packages have been patched to prevent this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Gentoo Security Advisory GLSA 200809-13 (R)

The remote host is missing updates announced in advisory GLSA 200809-13. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200809-13 (R)

The remote host is missing updates announced in advisory GLSA 200809-13. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200809-13 : R: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200809-13 R: Insecure temporary file creation Dmitry E. Oboukhov reported that the 'javareconf' script uses temporary files in an insecure manner. Impact : A local attacker could exploit this vulnerability to overwrite arbitrary...

CVE-2008-3931

javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2008-3931

javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2008-3931

javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

UBUNTU-CVE-2008-3931

javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2008-3931

Summary of CVE-2008-3931 (R-base): A symlink-based vulnerability in the javareconf script of R allowed local attackers to overwrite arbitrary files via insecure temporary file handling. The issue is rooted in the way temporary files are created by javareconf, enabling a local write when the scrip...

CVE-2008-3931

javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files...