CVE-2008-5145

ltpmenu in ltp 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/runltp.mainmenu. temporary file...

CVE-2008-5145

CVE-2008-5145 affects ltpmenu in ltp (20060918). Local users can overwrite arbitrary files via a symlink attack on the temporary file /tmp/runltp.mainmenu.#####, enabling potential local privilege impact. The records do not specify a vendor patch or fix version in the provided documents. The root...

CVE-2008-5135

The CVE refers to os-prober 1.17, where a local user can exploit a symlink to overwrite files via /tmp/mounted-map or /tmp/raided-map. The core issue is a symlink/temporary file handling path in the insecure code path. Several connected sources (NVD, Red Hat, Debian/Ubuntu advisories, and Nessus ...

CVE-2008-5142

sendbug in freebsd-sendpr 3.113+5.3 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pr. temporary file...

CVE-2008-5141

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar. temporary file...

CVE-2008-5144

nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvidia-cg-toolkit-manifest temporary file...

CVE-2008-5138

CVE-2008-5138 affects libpam-mount (example: version 0.43) and is triggered by a local symlink attack targeting a temporary file named /tmp/passwdehd, allowing local users to overwrite arbitrary files. The connected advisories confirm a fix implemented as a security update for pam_mount in SUSE/o...

CVE-2008-5157

The CVE-2008-5157 entry concerns tau 2.16.4. It describes a local-privilige escalation where local users can overwrite arbitrary files via a symlink attack targeting temporary files: /tmp/makefile.tau..##### or /tmp/makefile.tau .#####, associated with the tau_cxx, tau_f90, and tau_cc scripts. Th...

CVE-2008-5152

inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...

Exodus 0.10 - URI Handler Arbitrary Parameter Injection (1)

Exodus 0.10 - URI Handler Arbitrary Parameter Injection 1 -------------------------------------------------------------------------------- Exodus v0.10 uri handler arbitrary parameter injection by Nine:Situations:Group::strawdog tested against IE8b/xpsp3 may not work against non-English systems...

CVE-2008-5089

CVE-2008-5089 describes multiple insecure method vulnerabilities in the DDActiveReportsViewer2.ARViewer2 ActiveX control (arview2.ocx) of Data Dynamics ActiveReports 2.5.0.1314 . The underlying issue allows remote attackers to overwrite arbitrary files by calling one of three methods: Pages.Save ...

Chilkat Crypt ActiveX Control 'ChilkatCrypt2.dll' File Overwrite Vulnerability

Chilkat Crypt is prone to an ActiveX Control based arbitrary file overwrite vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-5034

The CVE-2008-5034 issue affects printfilters-ppd 2.13 (master-filter). A symlink attack on the /tmp/filter.debug temporary file enables local users to overwrite arbitrary files. The vendor disputes the vulnerability, stating that the package does not have a possibility of attack via symlinks. Imp...

CVE-2008-5007

createlazarusexporttgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a 1 /tmp/lazarus.tgz temporary file or a 2 /tmp/lazarus temporary directory...

CVE-2008-5007

CVE-2008-5007 affects Lazarus 0.9.24. The vulnerability arises from a symlink attack on temporary paths used by create_lazarus_export_tgz.sh, specifically (1) /tmp/lazarus.tgz and (2) /tmp/lazarus, allowing local users to overwrite or delete arbitrary files. The root cause is improper handling of...

CVE-2008-4995

redirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/redirect.log temporary file. NOTE: this vulnerability is only limited to debug mode, which is disabled by default...

CVE-2008-4993

qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file...

CVE-2008-4995

The CVE-2008-4995 entry concerns bk2site 1.1.9, where a symlink attack against the temporary file /tmp/redirect.log in redirect.pl permits local users to overwrite arbitrary files. The underlying issue is a symlink-based write risk present when the program operates in debug mode (which is disable...

CVE-2008-4996

init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor disputes this vulnerability, stating that "init is used in a single-user context; there's no possibility that this is exploitable...

CVE-2008-4994

The CVE-2008-4994 entry concerns the xmcd 2.6 package where the (1) ncsarmt and (2) ncsawrap scripts can be exploited by a local attacker to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.*pid file. This vulnerability arises from insecure temporary file handling in xmcd component...