7194 matches found
CVE-2008-4976
CVE-2008-4976 affects ogle 0.9.2 and ogle-mmx 0.9.2. It enables local users to overwrite arbitrary files via a symlink attack on predictable /tmp/ogle_… temporary files (ogle_audio, ogle_cli, ogle_ctrl, ogle_gui, ogle_mpeg_ps, ogle_mpeg_vs, ogle_nav, ogle_vout) tied to corresponding debug scripts...
CVE-2008-4968
The CVE-2008-4968 entry concerns lmbench (version 3.0-a7) where the rccs and STUFF scripts insecurely handle /tmp/sdiff.##### temporary files, enabling local attackers to perform symlink attacks and overwrite arbitrary files with the invoking user’s privileges. Documentation consistently cites lo...
CVE-2008-4974
rrdedit in netmrg 0.20 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.xml and 2 /tmp/.backup temporary files...
CVE-2008-4973
CVE-2008-4973 describes a local privilege issue in "i2myspell" within the myspell 3.1 package. The vulnerability enables local users to overwrite arbitrary files via a symlink attack against temporary files: /tmp/i2my#####.1 and /tmp/i2my#####.2. The issue is a local attack against temporary file...
CVE-2008-4965
The CVE-2008-4965 entry affects liguidsoap 0.3.8.1+2 where a local user can overwrite arbitrary files via a symlink attack against temporary files (/tmp/liguidsoap.liq, /tmp/lig.#####.log, /tmp/emission.ogg). The root cause is insecure temporary file handling that permits symlink manipulation, en...
CVE-2008-4982
CVE-2008-4982 : The vulnerability affects rkhunter 1.3.2, where a local user can overwrite arbitrary files via a symlink attack on the /tmp/rkhunter-debug temporary file. The note indicates this may be a separate issue from CVE-2005-1270. The provided sources describe the affected version and the...
CVE-2008-4972
CVE-2008-4972 concerns mailgo in mgt 2.31. The issue allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mailgo##### temporary file, indicating a file- overwrite vulnerability stemming from improper handling of temporary files. The CVSS data (NVD) describe a Local attac...
CVE-2008-4966
linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/snap and b /tmp/nightly temporary files, related to the 1 maysnap and 2 maytest scripts...
CVE-2008-4976
ogle 0.9.2 and ogle-mmx 0.9.2 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/ogleaudio., b /tmp/oglecli., c /tmp/oglectrl., d /tmp/oglegui., e /tmp/oglempegps., f /tmp/oglempegvs., g /tmp/oglenav., and h /tmp/oglevout., temporary files, related to the 1...
CVE-2008-4970
CVE-2008-4970 affects the Lustre file system: the runiozone component on Lustre 1.6.5 allows a local user to overwrite arbitrary files through a symlink race against the temporary file /tmp/iozone.log. The underlying issue is a local-file overwrite via a symlink attack. Exploitation is local and ...
CVE-2008-4986
CVE-2008-4986 affects wims 3.62, enabling local users to overwrite arbitrary files via a symlink attack targeting temporary files: /tmp/env#####, /tmp/sed#####, and /tmp/referer-home.log. The issue is related to the coqweb and account.sh scripts. The connected records reiterate the same vulnerabi...
CVE-2008-4979
CVE-2008-4979 affects rancid 2.3.2~a8. A local user can cause a symlink attack to overwrite arbitrary files via /tmp/ipacct.#####.prefixes, /tmp/ipacct.#####.sorted, /tmp/ipacct.#####.pl, and /tmp/ipacct.##### temporary files. The connected sources confirm the four symlink targets and local-write...
CVE-2008-4950
gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments...
CVE-2008-4953
firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.firehol-tmp--- and 2 /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create 1073741824PID-RANGE symlinks...
CVE-2008-4954
mead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/debugbuf temporary file...
CVE-2008-4956
fwbinstall in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent. temporary file...
CVE-2008-4953
firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.firehol-tmp--- and 2 /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create 1073741824PID-RANGE symlinks...
CVE-2008-4956
fwbinstall in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent. temporary file...
CVE-2008-4959
geo-code in gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/geo.google, 2 /tmp/geo.yahoo, 3 /tmp/geo.coords, and 4 /tmp/geo.coords temporary files...