EUVD-2005-1917

Malware in sbrugna...

CVE-2005-1915

The log4shreadProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames...

CVE-2005-1915

The log4shreadProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames...

CVE-2005-1915

The vulnerability CVE-2005-1915 affects log4sh up to version 1.2.5, where the log4sh_readProperties function is exploitable. The root cause is a symlink attack on predictable log4sh.$$ filenames, enabling local attackers to overwrite arbitrary files. The CVSS-derived impact is low base score with...

[Full-disclosure] log4sh insecure temporary file creation

log4sh insecure temporary file creation Vendor: http://forestent.com/products/log4sh/ Advisory: http://www.zataz.net/adviso/log4sh-06092005.txt Vendor informed: yes Exploit available: no Impact : low Exploitation : low The vulnerabilities are caused due to temporary file being created insecurely...