Samsung ml85p Printer Driver 1.0 - Insecure Temporary File Creation (1)

Samsung ml85p Printer Driver 1.0 - Insecure Temporary File Creation 1 // source: https://www.securityfocus.com/bid/3008/info ml85p is a Linux driver for Samsung ML-85G series printers. It may be bundled with distributions of Ghostscript. ml85p does not check for symbolic links when creating image...

Проблема символьных линков в драйвере Samsung ML-85G (symbolic link)

При создании временного файла используется метка времени...

Проблема символьных линков в LPRng + TeTeX (symbolic link)

Проблема символьных лдинков дает возможность получить euid/egid lp...

Символьные линки в InoculateIT (symbolic link)

Проблема символьных линков при загрузке обновлений...

Дырка в dialog (symbolic link)

Проблема символьных линков...

ARCservIT 6.61/6.63 Client - asagent.tmp Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/2741/info ARCservIT from Computer Associates contains a vulnerability which may allow malicious local users to overwrite arbitrary files. When it runs for the first time, 'asagent', opens and truncates it if it exists a file in /tmp called 'asagent.tmp'...

Дырка в nedit (symbolic link)

Проблема символьных линков при создании временных файлов...

Дырка в man из HP-UX

Проблема символьных линков - создается временный файл с предсказуемым именем...

[SECURITY] New versions of man2html fixes postinst glitch

Former versions of man2html uses a static file in /tmp for writing. This can lead into overwriting system files if a malicious user has created a symbolic link to it before upgrading man2html. We recommend you upgrade your man2html package as soon as possible. wget url will fetch the file for you...