11 matches found
EUVD-2014-1712
Malware in sbrugna...
CVE-2014-1638
1 debian/postrm and 2 debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...
CVE-2014-1638
1 debian/postrm and 2 debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...
DEBIAN-CVE-2014-1638
1 debian/postrm and 2 debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...
Code injection
1 debian/postrm and 2 debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...
UBUNTU-CVE-2014-1638
1 debian/postrm and 2 debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...
CVE-2014-1638
1 debian/postrm and 2 debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...
CVE-2014-1638
CVE-2014-1638 affects localepurge (before 0.7.3.2). The Debian/localepurge.config script creates a safe temporary file via tempfile, but then appends a suffix to the original filename and writes to this new filename. This allows a local user to overwrite arbitrary files through a symlink attack o...
CVE-2014-1638
1 debian/postrm and 2 debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...
CVE-2014-1638
1 debian/postrm and 2 debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite arbitrary files via a symlink attack on the new filename...
PT-2014-4268
Name of the Vulnerable Software and Affected Versions localepurge versions prior to 0.7.3.2 Description The issue allows local users to overwrite arbitrary files via a symlink attack. This is due to the use of tempfile to create a safe temporary file, but appending a suffix to the original filena...