Ubuntu 4.10 : vim vulnerabilities (USN-61-1)

Javier Fernandez-Sanguino Pena noticed that the auxillary scripts 'tcltags' and 'vimspell.sh' created temporary files in an insecure manner. This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the script either by calling it...

Mandrake Linux Security Advisory : graphviz (MDKSA-2005:188)

Javier Fernndez-Sanguino Pea discovered insecure temporary file creation in graphviz, a rich set of graph drawing tools, that can be exploited to overwrite arbitrary files by a local attacker. The updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable Network...

[Full-disclosure] MDKSA-2006:001 - Updated tkcvs packages fix insecure temporary file vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:001 http://www.mandriva.com/security/ Package : tkcvs Date : January 3, 2006 Affected: 10.2, 2006.0 Problem Description: Javier Fernandez-Sanguino Pena discovered that tkdiff created temporary files in an...

[SECURITY] [DSA 927-2] New tkdiff packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 927-2 [email protected] http://www.debian.org/security/ Martin Schulze December 29th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 928-1] New dhis-tools-dns packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 928-1 [email protected] http://www.debian.org/security/ Martin Schulze December 27th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 928-1] New dhis-tools-dns packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 928-1 [email protected] http://www.debian.org/security/ Martin Schulze December 27th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 927-1] New tkdiff packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 927-1 [email protected] http://www.debian.org/security/ Martin Schulze December 27th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 907-1] New ipmenu packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 907-1 [email protected] http://www.debian.org/security/ Martin Schulze November 23rd, 2005 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 907-1] New ipmenu packages fix insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 907-1 [email protected] http://www.debian.org/security/ Martin Schulze November 23rd, 2005 http://www.debian.org/security/faq -...

GLSA-200511-16 : GNUMP3d: Directory traversal and insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200511-16 GNUMP3d: Directory traversal and insecure temporary file creation Ludwig Nussel from SUSE Linux has identified two vulnerabilities in GNUMP3d. GNUMP3d fails to properly check for the existence of /tmp/index.lok before...

[SECURITY] [DSA 883-1] New thttpd packages fix insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 883-1 [email protected] http://www.debian.org/security/ Martin Schulze November 4th, 2005 http://www.debian.org/security/faq -...

MySQL mysqlhotcopy script insecure temporary file

You are running a version of MySQL which is older than version 4.0.21. mysqlhotcopy is reported to contain an insecure temporary file creation vulnerability. The result of this is that temporary files created by the application may use predictable filenames. A local attacker may also possibly...

PostgreSQL insecure temporary file creation

The remote PostgreSQL server, according to its version number, is vulnerable to an unspecified insecure temporary file creation flaw. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

[SA17299] mgdiff Patch Viewer Insecure Temporary File Creation

TITLE: mgdiff Patch Viewer Insecure Temporary File Creation SECUNIA ADVISORY ID: SA17299 VERIFY ADVISORY: http://secunia.com/advisories/17299/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: mgdiff Patch Viewer http://secunia.com/product/5962/ DESCRIPTION: Javie...

[SECURITY] [DSA 867-1] New module-assistant package fixes insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 867-1 [email protected] http://www.debian.org/security/ Martin Schulze October 20th, 2005 http://www.debian.org/security/faq -...

[Full-disclosure] [SECURITY] [DSA 867-1] New module-assistant package fixes insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 867-1 [email protected] http://www.debian.org/security/ Martin Schulze October 20th, 2005 http://www.debian.org/security/faq -...

Mandrake Linux Security Advisory : cfengine (MDKSA-2005:184)

Javier Fernndez-Sanguino Pea discovered several insecure temporary file uses in cfengine = 1.6.5 and = 2.1.16 which allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in. CVE-2005-2960 In addition, Javier discovered the cfmailfilter and cfcron.in...

GLSA-200510-04 : Texinfo: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200510-04 Texinfo: Insecure temporary file creation Frank Lichtenheld has discovered that the 'sortoffline' function in texindex insecurely creates temporary files with predictable filenames. Impact : A local attacker could create...

[Full-disclosure] [SECURITY] [DSA 857-1] New graphviz packages fix insecure temporary file

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 857-1 [email protected] http://www.debian.org/security/ Martin Schulze October 10th, 2005 http://www.debian.org/security/faq -...

Debian DSA-839-1 : apachetop - insecure temporary file

Eric Romang discovered an insecurely created temporary file in apachetop, a realtime monitoring tool for the Apache webserver that could be exploited with a symlink attack to overwrite arbitrary files with the user id that runs apachetop. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...