Design/Logic Flaw

vdrleaktest in Video Disk Recorder aka vdr-dbg or vdr 1.6.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/memleaktest.log temporary file...

CVE-2008-4987

xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/ldconfig.tmp, b /tmp/ldconf.tmp, and c /tmp/ld.so.conf temporary files, related to the 1 get-maptools.sh and 2 getshapelib.sh scripts...

Authentication flaw

linuxtrade 3.65 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/bwk, b /tmp/zzz, and c /tmp/ggg temporary files, related to the 1 linuxtrade.bwkvol, 2 linuxtrade.wn, and 3 moneyam.helper scripts...

CVE-2008-4973

i2myspell in myspell 3.1 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/i2my.1 and 2 /tmp/i2my.2 temporary files...

CVE-2008-4987

Xastir 1.9.2 is vulnerable to a local privilege issue: a symlink attack can overwrite arbitrary files via /tmp/ldconfig.tmp, /tmp/ldconf.tmp, and /tmp/ld.so.conf, related to the get-maptools.sh and get_shapelib.sh scripts. CVSS 2.0 base score 6.9 (LOCAL, MEDIUM). Fedora advisories FEDORA-2008-726...

CVE-2008-4980

CVE-2008-4980 affects rccp 0.9. Local users can overwrite arbitrary files via a symlink attack on the /tmp/cccp_tmp.txt temporary file. The root cause is improper handling of a temporary file, enabling a symlink to redirect writes. Impact is partial to complete confidentiality, integrity, and ava...

CVE-2008-4987

xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/ldconfig.tmp, b /tmp/ldconf.tmp, and c /tmp/ld.so.conf temporary files, related to the 1 get-maptools.sh and 2 getshapelib.sh scripts...

CVE-2008-4985

vdrleaktest in Video Disk Recorder aka vdr-dbg or vdr 1.6.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/memleaktest.log temporary file...

CVE-2008-4974

CVE-2008-4974 affects rrdedit in netmrg 0.20. The issue allows a local attacker to overwrite arbitrary files via a symlink attack on temporary files under /tmp (*/.xml and */.backup). Root cause is a local-file write vulnerability tied to symlink handling in rrdedit, enabling manipulation of file...

CVE-2008-4973

CVE-2008-4973 describes a local privilege issue in "i2myspell" within the myspell 3.1 package. The vulnerability enables local users to overwrite arbitrary files via a symlink attack against temporary files: /tmp/i2my#####.1 and /tmp/i2my#####.2. The issue is a local attack against temporary file...

CVE-2008-4969

ltp-network-test 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/vsftpd.conf, b /tmp/udp/2/, c /tmp/tcp/2/, d /tmp/udp/3/, e /tmp/tcp/3/, f /tmp/nfsfsstress.udp.2.log, g /tmp/nfsfsstress.udp.3.log, h /tmp/nfsfsstress.tcp.2.log, i /tmp/nfsfsstress.tcp.3.log,...

CVE-2008-4974

rrdedit in netmrg 0.20 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.xml and 2 /tmp/.backup temporary files...

CVE-2008-4965

The CVE-2008-4965 entry affects liguidsoap 0.3.8.1+2 where a local user can overwrite arbitrary files via a symlink attack against temporary files (/tmp/liguidsoap.liq, /tmp/lig.#####.log, /tmp/emission.ogg). The root cause is insecure temporary file handling that permits symlink manipulation, en...

CVE-2008-4972

CVE-2008-4972 concerns mailgo in mgt 2.31. The issue allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mailgo##### temporary file, indicating a file- overwrite vulnerability stemming from improper handling of temporary files. The CVSS data (NVD) describe a Local attac...

CVE-2008-4976

CVE-2008-4976 affects ogle 0.9.2 and ogle-mmx 0.9.2. It enables local users to overwrite arbitrary files via a symlink attack on predictable /tmp/ogle_… temporary files (ogle_audio, ogle_cli, ogle_ctrl, ogle_gui, ogle_mpeg_ps, ogle_mpeg_vs, ogle_nav, ogle_vout) tied to corresponding debug scripts...

CVE-2008-4968

The CVE-2008-4968 entry concerns lmbench (version 3.0-a7) where the rccs and STUFF scripts insecurely handle /tmp/sdiff.##### temporary files, enabling local attackers to perform symlink attacks and overwrite arbitrary files with the invoking user’s privileges. Documentation consistently cites lo...

CVE-2008-4982

CVE-2008-4982 : The vulnerability affects rkhunter 1.3.2, where a local user can overwrite arbitrary files via a symlink attack on the /tmp/rkhunter-debug temporary file. The note indicates this may be a separate issue from CVE-2005-1270. The provided sources describe the affected version and the...

CVE-2008-4976

ogle 0.9.2 and ogle-mmx 0.9.2 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/ogleaudio., b /tmp/oglecli., c /tmp/oglectrl., d /tmp/oglegui., e /tmp/oglempegps., f /tmp/oglempegvs., g /tmp/oglenav., and h /tmp/oglevout., temporary files, related to the 1...

CVE-2008-4970

CVE-2008-4970 affects the Lustre file system: the runiozone component on Lustre 1.6.5 allows a local user to overwrite arbitrary files through a symlink race against the temporary file /tmp/iozone.log. The underlying issue is a local-file overwrite via a symlink attack. Exploitation is local and ...

CVE-2008-4966

linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/snap and b /tmp/nightly temporary files, related to the 1 maysnap and 2 maytest scripts...