DEBIAN-CVE-2008-4982

rkhunter in rkhunter 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rkhunter-debug temporary file. NOTE: this is probably a different vulnerability than CVE-2005-1270...

CVE-2008-4986

wims 3.62 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/env, b /tmp/sed, and c /tmp/referer-home.log temporary files, related to the 1 coqweb and 2 account.sh scripts...

CVE-2008-4982

rkhunter in rkhunter 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rkhunter-debug temporary file. NOTE: this is probably a different vulnerability than CVE-2005-1270...

CVE-2008-4988

pscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal temporary file...

CVE-2008-4979

getipacctg in rancid 2.3.2a8 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/ipacct..prefixes, 2 /tmp/ipacct..sorted, 3 /tmp/ipacct..pl, and 4 /tmp/ipacct. temporary files...

CVE-2008-4985

vdrleaktest in Video Disk Recorder aka vdr-dbg or vdr 1.6.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/memleaktest.log temporary file...

CVE-2008-4965

liguidsoap.py in liguidsoap 0.3.8.1+2 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/liguidsoap.liq, 2 /tmp/lig..log, and 3 /tmp/emission.ogg temporary files...

DEBIAN-CVE-2008-4972

mailgo in mgt 2.31 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mailgo temporary file...

CVE-2008-4971

mafft-homologs in mafft 6.240 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/vf?????, 2 /tmp/if?????, 3 /tmp/pf?????, 4 /tmp/af?????, 5 /tmp/rid?????, 6 /tmp/res?????, 7 /tmp/q?????, and 8 /tmp/bf????? temporary files...

CVE-2008-4973

i2myspell in myspell 3.1 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/i2my.1 and 2 /tmp/i2my.2 temporary files...

CVE-2008-4969

ltp-network-test 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/vsftpd.conf, b /tmp/udp/2/, c /tmp/tcp/2/, d /tmp/udp/3/, e /tmp/tcp/3/, f /tmp/nfsfsstress.udp.2.log, g /tmp/nfsfsstress.udp.3.log, h /tmp/nfsfsstress.tcp.2.log, i /tmp/nfsfsstress.tcp.3.log,...

Design/Logic Flaw

perl.robot in realtimebattle 1.0.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl.robot.log temporary file...

CVE-2008-4975

mkmailpost in newsgate 1.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mmp temporary file...

CVE-2008-4969

ltp-network-test 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/vsftpd.conf, b /tmp/udp/2/, c /tmp/tcp/2/, d /tmp/udp/3/, e /tmp/tcp/3/, f /tmp/nfsfsstress.udp.2.log, g /tmp/nfsfsstress.udp.3.log, h /tmp/nfsfsstress.tcp.2.log, i /tmp/nfsfsstress.tcp.3.log,...

Code injection

xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/ldconfig.tmp, b /tmp/ldconf.tmp, and c /tmp/ld.so.conf temporary files, related to the 1 get-maptools.sh and 2 getshapelib.sh scripts...

Design/Logic Flaw

vdrleaktest in Video Disk Recorder aka vdr-dbg or vdr 1.6.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/memleaktest.log temporary file...

CVE-2008-4987

xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/ldconfig.tmp, b /tmp/ldconf.tmp, and c /tmp/ld.so.conf temporary files, related to the 1 get-maptools.sh and 2 getshapelib.sh scripts...

Authentication flaw

linuxtrade 3.65 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/bwk, b /tmp/zzz, and c /tmp/ggg temporary files, related to the 1 linuxtrade.bwkvol, 2 linuxtrade.wn, and 3 moneyam.helper scripts...

CVE-2008-4973

i2myspell in myspell 3.1 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/i2my.1 and 2 /tmp/i2my.2 temporary files...

CVE-2008-4987

Xastir 1.9.2 is vulnerable to a local privilege issue: a symlink attack can overwrite arbitrary files via /tmp/ldconfig.tmp, /tmp/ldconf.tmp, and /tmp/ld.so.conf, related to the get-maptools.sh and get_shapelib.sh scripts. CVSS 2.0 base score 6.9 (LOCAL, MEDIUM). Fedora advisories FEDORA-2008-726...