4 matches found
CVE-2004-0851
The 1 writelist and 2 dumpcurrlist functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
Debian DSA-559-1 : net-acct - insecure temporary file
Stefan Nordhausen has identified a local security hole in net-acct, a user-mode IP accounting daemon. Old and redundant code from some time way back in the past created a temporary file in an insecure fashion. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...
CVE-2004-0851
The 1 writelist and 2 dumpcurrlist functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
[SA12476] Net-Acct Insecure Temporary File Creation Vulnerability
TITLE: Net-Acct Insecure Temporary File Creation Vulnerability SECUNIA ADVISORY ID: SA12476 VERIFY ADVISORY: http://secunia.com/advisories/12476/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Net-Acct 0.x http://secunia.com/product/3875/ DESCRIPTION: Stefan...