CVE-2012-3500

scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary 1 standard output or 2 standard error output file...

Fedora 18 : rpmdevtools-8.3-1.fc18 (2012-13208)

Update to upstream version 8.3, fixing among other issues a symlink attack possibility in annotate-output CVE-2012-3500. http://git.fedorahosted.org/cgit/rpmdevtools.git/tree/NEWS?id=HEAD Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 17 : rpmdevtools-8.3-1.fc17 (2012-13234)

Update to upstream version 8.3, fixing among other issues a symlink attack possibility in annotate-output CVE-2012-3500. http://git.fedorahosted.org/cgit/rpmdevtools.git/tree/NEWS?id=HEAD Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Fedora 16 : rpmdevtools-8.3-1.fc16 (2012-13263)

Update to upstream version 8.3, fixing among other issues a symlink attack possibility in annotate-output CVE-2012-3500. http://git.fedorahosted.org/cgit/rpmdevtools.git/tree/NEWS?id=HEAD Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Slackware Advisory SSA:2008-241-01 amarok

The remote host is missing an update as announced via advisory SSA:2008-241-01. OpenVAS Vulnerability Test $Id: esoftslkssa200824101.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Debian DSA-2545-1 : qemu - multiple vulnerabilities

Multiple vulnerabilities have been discovered in QEMU, a fast processor emulator. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2012-2652 : The snapshot mode of QEMU -snapshot incorrectly handles temporary files used to store the current state, making ...

Mandrake Linux Security Advisory : mgetty (MDKSA-2000:042)

There is a problem in the mgetty package, which contains a number of tools for sending and receiving faxes. The faxrunq tool uses a marker file in the /tmp directory, which is world-writable, in an insecure fashion. This problem, if exploited, allows malicious users to overwrite files on the syst...

Mandrake Linux Security Advisory : Mesa (MDKSA-2001:029)

Ben Collins identified a temporary file race in the Utah-glx component of the Mesa package which affects Linux-Mandrake 7.2. The /tmp/glxmemory file is created by Utah-glx and because it is not created securely could be used in a symlink attack which allows files to be overwritten the next time t...

Mandrake Linux Security Advisory : exmh (MDKSA-2001:015)

All versions of exmh prior to 2.3.1 use the /tmp directory for storing temporary files. This was done in an insecure manner as exmh did not check to ensure that nobody placed a symlink with the same name in /tmp in the meantime and thus was vulnerable to a symlink attack. This could lead to a...

CVE-2012-3500

scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary 1 standard output or 2 standard error output file...

CVE-2011-5146

Bokken before 1.6 and 1.5-x before 1.5-3 for Debian allows local users to overwrite arbitrary files via a symlink attack on /tmp/graph.dot...

CVE-2011-5146

Bokken before 1.6 and 1.5-x before 1.5-3 for Debian allows local users to overwrite arbitrary files via a symlink attack on /tmp/graph.dot...

Code injection

Bokken before 1.6 and 1.5-x before 1.5-3 for Debian allows local users to overwrite arbitrary files via a symlink attack on /tmp/graph.dot...

CVE-2011-5146

Bokken before 1.6 and 1.5-x before 1.5-3 for Debian allows local users to overwrite arbitrary files via a symlink attack on /tmp/graph.dot...

CVE-2011-5146

CVE-2011-5146 affects Bokken before 1.6 and 1.5-x before 1.5-3 for Debian. The root cause is a symlink attack on /tmp/graph.dot, allowing local users to overwrite arbitrary files. Impact described as local user access with potential file overwrite; no exploitation details or patches are provided ...

CVE-2011-5146

Bokken before 1.6 and 1.5-x before 1.5-3 for Debian allows local users to overwrite arbitrary files via a symlink attack on /tmp/graph.dot...

CVE-2012-3378

The registerapplication function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack on a temporary socket file in...

CVE-2012-3378

The registerapplication function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack on a temporary socket file in...

DEBIAN-CVE-2012-3378

The registerapplication function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack on a temporary socket file in...

Design/Logic Flaw

The registerapplication function in atk-adaptor/bridge.c in GNOME at-spi2-atk 2.5.2 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack on a temporary socket file in...