9267 matches found
CVE-2005-3136: Undefined Security Weakness
Directory traversal vulnerability in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to overwrite arbitrary files via a .. dot dot in a filename...
Berkeley MPEG Tools: Multiple insecure temporary files
Background The Berkeley MPEG Tools are a collection of utilities for manipulating MPEG video technology, including an encoder mpegencode and various conversion utilities. Description Mike Frysinger of the Gentoo Security Team discovered that mpegencode and the conversion utilities were creating...
Low: Red Hat Security Advisory: ghostscript security update
Updated ghostscript packages that fix a PDF output issue and a temporary file security bug are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Ghostscript is a program for displaying PostScript files or printing them to non-PostScript...
CVE-2005-3069
xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the xferfax$$ temporary file...
DEBIAN-CVE-2005-3069
xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the xferfax$$ temporary file...
security flaw
wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences...
CVE-2005-3069: Undefined Security Weakness
xferfaxstats in HylaFax 4.2.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the xferfax$$ temporary file...
HylaFAX < 4.2.2 RC1 xferfaxstats Symlink Arbitrary File Overwrite
Binary data 3236.prm...
CVE-2005-2663
CVE-2005-2663 affects masqmail: opening the log file allows a local attacker to overwrite arbitrary files via a symlink attack, due to masqmail not relinquishing privileges. Affected versions are pre-0.2.18. Debian/DSA references indicate fixes in masqmail 0.2.20-1sarge1 and related updates for w...
CVE-2005-2663
masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file...
CVE-2005-2663
Removed by vendor...
CVE-2005-3011
The sortoffline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2991
ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files using 1 zdiff or 2 zcmp, a different vulnerability than CVE-2004-0970...
CVE-2005-2991: Undefined Security Weakness
ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files using 1 zdiff or 2 zcmp, a different vulnerability than CVE-2004-0970...
CVE-2005-2944
The performfilesave function in GNOME Workstation Command Center gwcc 0.9.6 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the gwccout.txt temporary file...
CVE-2005-2944
The performfilesave function in GNOME Workstation Command Center gwcc 0.9.6 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the gwccout.txt temporary file...
CVE-2005-2944: Undefined Security Weakness
The performfilesave function in GNOME Workstation Command Center gwcc 0.9.6 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the gwccout.txt temporary file...
CVE-2005-2918
gtkdiskfree (versions 1.9.3 and earlier) is affected by CAN-2005-2918/CVE-2005-2918 due to insecure creation of a temporary file, enabling local attackers to overwrite arbitrary files via a symlink attack. Impact is local access with the user’s privileges; no remote code execution is indicated in...
CVE-2005-2918: Undefined Security Weakness
The opencmdtube function in mount.c for gtkdiskfree 1.9.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the gtkdiskfree temporary file...