EUVD-2005-0183

Malware in sbrugna...

FreeBSD : mod_dosevasive -- insecure temporary file creation (88ff90f2-6e43-11d9-8c87-000a95bc6fae)

An LSS Security Advisory reports : When a denial of service attack is detected, moddosevasive will, among other things, create a temporary file which it will use to trace actions from the offensive IP address. This file is insecurely created in /tmp and it's name is easily predictable. It is then...

CVE-2005-0182

The vulnerability CVE-2005-0182 affects the mod_dosevasive Apache module, versions 1.9 and earlier. The issue arises because the module creates temporary files with predictable filenames, which could enable remote attackers to overwrite arbitrary files via a symlink attack. This could impact inte...

Mod_dosevasive symlink and race vulnerability

LSS Security Advisory LSS-2005-01-01 http://security.lss.hr --- Title : Moddosevasive symlink and race vulnerability Advisory ID : LSS-2005-01-4 Date : January 1th, 2005 Advisory URL: : http://security.lss.hr/en/index.php?page=details&ID=LSS-2005-01-01 Impact : Arbitrary file creation Risk level ...

Apache mod_dosevasive symbolic links problem

Symbolic links problem on temporary files creation...

[SA13725] Apache mod_dosevasive Insecure Temporary File Creation

TITLE: Apache moddosevasive Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13725 VERIFY ADVISORY: http://secunia.com/advisories/13725/ CRITICAL: Not critical IMPACT: Manipulation of data, Privilege escalation WHERE: Local system SOFTWARE: moddosevasive 1.x module for Apache...

CVE-2005-0182

The moddosevasive module 1.9 and earlier for Apache creates temporary files with predictable filenames, which could allow remote attackers to overwrite arbitrary files via a symlink attack...

mod_dosevasive -- insecure temporary file creation

An LSS Security Advisory reports: When a denial of service attack is detected, moddosevasive will, among other things, create a temporary file which it will use to trace actions from the offensive IP address. This file is insecurely created in /tmp and it's name is easily predictable. It is then...