5 matches found
Permissions bypass in pleaser
pleaseedit in pleaser before 0.4.0 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack...
CVE-2021-31154
pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack...
PT-2012-4673
Name of the Vulnerable Software and Affected Versions GNOME at-spi2-atk version 2.5.2 Description The issue concerns the register application function in atk-adaptor/bridge.c, which does not properly seed the random number generator. This results in the generation of predictable temporary file...
CVE-2003-0771
Apache::Gallery (Gallery.pm) is vulnerable to local code execution due to predictable temporary filenames used when executing Inline::C. The underlying issue is the creation/modification race on temporary files before Apache::Gallery handles them. Affected component: Gallery.pm within Apache::Gal...
CVE-2003-0771: Undefined Security Weakness
Gallery.pm in Apache::Gallery aka A::G uses predictable temporary filenames when running Inline::C, which allows local users to execute arbitrary code by creating and modifying the files before Apache::Gallery does...