CVE-2004-1689

sudoedit aka sudo -e in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit...

CVE-2004-1604

cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink attack on the private directory, which is created when Front Page extensions are enabled...

CVE-2004-1604

CVE-2004-1604 affects cPanel 9.9.1-RELEASE-3. Affected component: the Front Page extensions workflow creates a _private directory; a symlink attack allows remote authenticated users to modify permissions (chmod) on arbitrary files via that directory. Underlying cause: symlink-related path travers...

security flaw

The 1 tcltags or 2 vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files...

security flaw

The DBI library libdbi-perl for Perl allows local users to overwrite arbitrary files via a symlink attack on a temporary PID file...

security flaw

The 1 tcltags or 2 vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files...

security flaw

Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack...

CVE-2005-0159

The tpkg- scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-0159

CVE-2005-0159 concerns insecure temporary file handling in the Debian-specific tpkg-* scripts within toolchain-source (version 3.0.4 in Woody; later fixes in 3.4-5 for sid). A local attacker could exploit symlink tricks to overwrite arbitrary files via insecure temporary files, enabling local pri...

[SECURITY] [DSA 679-1] New toolchain-source package fixes insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 679-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 679-1] New toolchain-source package fixes insecure temporary files

-------------------------------------------------------------------------- Debian Security Advisory DSA 679-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2005 http://www.debian.org/security/faq -...

CVE-2004-0851

The 1 writelist and 2 dumpcurrlist functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2004-0851

CVE-2004-0851 affects Net-Acct before version 0.71, where write_list and dump_curr_list could allow local users to overwrite arbitrary files via insecure temporary file handling (symlink attack). Mitigation: Debian fixed in DSA-559-1, upgrading net-acct to 0.71-5woody1 (and 0.71-7 for sid) is rec...

CVE-2004-0851

The 1 writelist and 2 dumpcurrlist functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-0365

The dcopidlng script in KDE 3.2.x and 3.3.x creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2005-0365

The CVE-2005-0365 issue affects KDE’s dcopidlng component in KDE 3.2.x and 3.3.x, where temporary files are created with predictable filenames, enabling local users to overwrite arbitrary files via a symlink attack. Connected documents confirm insecure temporary-file usage in dcopidlng and refere...

CVE-2004-0966

The 1 autopoint and 2 gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0971

The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0972

The lvmcreateinitrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0966

The 1 autopoint and 2 gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files...