Mandrake Linux Security Advisory : gnucash (MDKSA-2007:046)

Gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 gnucash.trace, 2 qof.trace, and 3 qof.trace.PID temporary files. Updated package have been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...

gnucash symbolic links vulnerability

Symbolic links problem on temporary files creation...

[ MDKSA-2007:046 ] - Updated gnucash packages fix temp file issues.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2007:046 http://www.mandriva.com/security/ Package : gnucash Date : February 21, 2007 Affected: 2007.0 Problem Description: Gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink...

Design/Logic Flaw

gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 gnucash.trace, 2 qof.trace, and 3 qof.trace.PID temporary files...

CVE-2007-0007

gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 gnucash.trace, 2 qof.trace, and 3 qof.trace.PID temporary files...

CVE-2007-0007

gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 gnucash.trace, 2 qof.trace, and 3 qof.trace.PID temporary files...

CVE-2007-0007

gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 gnucash.trace, 2 qof.trace, and 3 qof.trace.PID temporary files...

DEBIAN-CVE-2007-0007

gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 gnucash.trace, 2 qof.trace, and 3 qof.trace.PID temporary files...

CVE-2007-0007

gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 gnucash.trace, 2 qof.trace, and 3 qof.trace.PID temporary files...

CVE-2007-0007

CVE-2007-0007 affects GnuCash 2.0.4 and earlier, enabling local users to overwrite arbitrary files via a symlink attack on temporary files (gnucash.trace, qof.trace, and qof.trace.[PID]). The issue stems from insecure handling of the tmp filesystem/trace files. Public advisories across distros co...

CVE-2007-0007

gnucash 2.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 gnucash.trace, 2 qof.trace, and 3 qof.trace.PID temporary files...

CVE-2000-0145

The CVE-2000-0145 issue affects gnucash on Debian GNU/Linux via the libguile.so library installed with world-writable permissions. The root cause is a world-writable libguile.so, which could allow unauthorized modifications to the file. Impact is described as enabling modification of the library,...

CVE-2000-0145

The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions...

PT-2000-1130 · Debian +1 · Debian +2

Name of the Vulnerable Software and Affected Versions: gnucash affected versions not specified Description: The issue concerns the libguile.so library file used by gnucash, which is installed with world-writable permissions in Debian GNU/Linux. This could potentially allow unauthorized...