GLSA-200909-10 : LMBench: Insecure temporary file usage

The remote host is affected by the vulnerability described in GLSA-200909-10 LMBench: Insecure temporary file usage Dmitry E. Oboukhov reported that the rccs and STUFF scripts do not handle '/tmp/sdiff.' temporary files securely. NOTE: There might be further occurances of insecure temporary file...

GLSA-200909-09 : Screenie: Insecure temporary file usage

The remote host is affected by the vulnerability described in GLSA-200909-09 Screenie: Insecure temporary file usage Dmitry E. Oboukhov reported that Screenie does not handle '/tmp/.screenie.' temporary files securely. Impact : A local attacker could perform symlink attacks to overwrite arbitrary...

RedHat Security Advisory RHSA-2009:1339

The remote host is missing updates announced in advisory RHSA-2009:1339. The rgmanager package contains the Red Hat Resource Group Manager, which provides high availability for critical server applications in the event of system downtime. Multiple insecure temporary file use flaws were discovered...

RedHat Security Advisory RHSA-2009:1337

The remote host is missing updates announced in advisory RHSA-2009:1337. The gfs2-utils package provides the user-space tools necessary to mount, create, maintain, and test GFS2 file systems. Multiple insecure temporary file use flaws were discovered in GFS2 user level utilities. A local attacker...

RedHat Security Advisory RHSA-2009:1339

The remote host is missing updates announced in advisory RHSA-2009:1339. The rgmanager package contains the Red Hat Resource Group Manager, which provides high availability for critical server applications in the event of system downtime. Multiple insecure temporary file use flaws were discovered...

RedHat Security Advisory RHSA-2009:1341

The remote host is missing updates announced in advisory RHSA-2009:1341. The Cluster Manager cman utility provides services for managing a Linux cluster. Multiple insecure temporary file use flaws were found in fenceapcsnmp and ccstool. A local attacker could use these flaws to overwrite an...

cman/fence: insecure temporary file usage in the apc fence agents

The 1 fenceapc and 2 fenceapcsnmp programs, as used in a fence 2.02.00-r1 and possibly b cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file...

RHEL 3 / 4 / 5 : acroread (RHSA-2008:0641)

Updated acroread packages that fix various security issues are now available for Red Hat Enterprise Linux 3 Extras, 4 Extras, and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. Adobe Acrobat Reader allows users to view and pri...

RHEL 3 : dhcp (RHSA-2009:1154)

Updated dhcp packages that fix two security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an...

FreeBSD : insecure temporary file creation in xine-check, xine-bugreport (fde53204-7ea6-11d8-9645-0020ed76ef5a)

Some scripts installed with xine create temporary files insecurely. It is recommended that these scripts xine-check, xine-bugreport not be used. They are not needed for normal operation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...

Gentoo Security Advisory GLSA 200903-18 (openswan)

The remote host is missing updates announced in advisory GLSA 200903-18. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200903-08 : gEDA: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200903-08 gEDA: Insecure temporary file creation Dmitry E. Oboukhov reported an insecure temporary file usage within the sch2eaglepos.sh script. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files...

MKPortal 1.2.1 - modulesblogindex.php Home Template Textarea SQL Injection

MKPortal 1.2.1 - modulesblogindex.php Home Template Textarea SQL Injection source: https://www.securityfocus.com/bid/33300/info MKPortal is prone to multiple security vulnerabilities, including SQL-injection, HTML-injection, cross-site scripting, arbitrary-file-upload, and...

xen: insecure temporary file use in qemu-dm.debug

qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file...

Gentoo Security Advisory GLSA 200812-12 (honeyd)

The remote host is missing updates announced in advisory GLSA 200812-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

GLSA-200812-13 : OpenOffice.org: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200812-13 OpenOffice.org: Multiple vulnerabilities Two heap-based buffer overflows when processing WMF files CVE-2008-2237 and EMF files CVE-2008-2238 were discovered. Dmitry E. Oboukhov also reported an insecure temporary file...

GLSA-200812-12 : Honeyd: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200812-12 Honeyd: Insecure temporary file creation Dmitry E. Oboukhov reported an insecure temporary file usage within the 'test.sh' script. Impact : A local attacker could perform symlink attacks and overwrite arbitrary files wit...

OpenOffice.org: Multiple vulnerabilities

Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description Two heap-based buffer overflows when processing WMF files CVE-2008-2237 and EMF files...

chm2pdf Insecure Temporary File Creation or DoS Vulnerability

This host is installed with chm2pdf and is prone to Insecure Temporary File Creation or Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbchm2pdfinsectmpfilecrtnvuln.nasl 4218 2016-10-05 14:20:48Z teissa $ chm2pdf Insecure Temporary File Creation or DoS Vulnerability Authors:...

chm2pdf Insecure Temporary File Creation or DoS Vulnerability

chm2pdf is prone to an insecure temporary file creation or denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...