7012 matches found
IBM DB2 db2job - File Overwrite
IBM DB2 db2job - File Overwrite source: https://www.securityfocus.com/bid/8344/info IBM's DB2 database ships with a utility called db2job, installed with permissions 4550 and owned by root.db2asgrp. It has been reported that db2job writes to a number of files with root privileges. The files writt...
IBM DB2 db2job - File Overwrite
source: https://www.securityfocus.com/bid/8344/info IBM's DB2 database ships with a utility called db2job, installed with permissions 4550 and owned by root.db2asgrp. It has been reported that db2job writes to a number of files with root privileges. The files written to are created with 0770...
cdrtools privilege escalation
rscsi utility allows unprivileged user to overwrite any file...
DSA-362 mindi - insecure temporary file
Bulletin has no description...
CVE-2003-0606
CVE-2003-0606 affects the Debian package “sup” (1.8 and earlier). The issue is improper creation of temporary files, enabling a local attacker to overwrite arbitrary files with the user’s privileges. Documented in Debian DSA-353-1 and mirrored by Red Hat and OSV entries; remediation is to apply t...
CVE-2003-0603
Bugzilla 2.16.x before 2.16.3, 2.17.x before 2.17.4, and earlier versions allows local users to overwrite arbitrary files via a symlink attack on temporary files that are created in directories with group-writable or world-writable permissions...
CVE-2003-0603
CVE-2003-0603 affects Bugzilla up to 2.16.2/2.17.x: local users could overwrite arbitrary files via a symlink attack on temporary files created in world- or group-writable directories. Root cause: insecure handling of temporary filenames leading to symlink exploits. Impact: local privilege or fil...
DSA-353 sup - insecure temporary file
Bulletin has no description...
CVE-2003-0438
eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0379
Unknown vulnerability in Apple File Service AFP Server for Mac OS X Server, when sharing files on a UFS or re-shared NFS volume, allows remote attackers to overwrite arbitrary files...
CVE-2003-0438
eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0517
faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files...
CVE-2003-0440
CVE-2003-0440 concerns the semi MIME library and its fork wemi, where insecure temporary-file handling allows a local attacker to overwrite arbitrary files via a symlink attack. Public sources (NVD entry) cite semi up to version 1.14.5 and wemi up to 1.14.0 as vulnerable; Debian, Red Hat, and Ope...
CVE-2003-0524
Qt in Knoppix 3.1 Live CD allows local users to overwrite arbitrary files via a symlink attack on the qtplugins3.0rc temporary file in the .qt directory...
CVE-2003-0440
The 1 semi MIME library 1.14.5 and earlier, and 2 wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0539
skk Simple Kana to Kanji conversion program 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files...
CVE-2003-0440
The 1 semi MIME library 1.14.5 and earlier, and 2 wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...
DSA-343 skk, ddskk - insecure temporary file
Bulletin has no description...
[SECURITY] [DSA-337-1] New semi, wemi packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 337-1 [email protected] http://www.debian.org/security/ Matt Zimmerman July 6th, 2003 http://www.debian.org/security/faq -...