CVE-2009-1893

The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux RHEL 3 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file, related to the "dhcpd -t" command...

CVE-2009-1893

CVE-2009-1893 is a local‑privilege issue in the Red Hat dhcpd init script for DHCP 3.0.1 on RHEL where a symlink attack during the configtest/restart/reload path could let a local attacker overwrite arbitrary files via a temporary file. The root cause is insecure usage of a temporary file by the ...

PT-2009-4354 · Red Hat · Dhcpd +1

Name of the Vulnerable Software and Affected Versions: Red Hat dhcpd version 3.0.1 in Red Hat Enterprise Linux RHEL 3 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file, related to the dhcpd init script's configtest function and the...

dhcp: insecure temporary file use in the dhcpd init script

The configtest function in the Red Hat dhcpd init script for DHCP 3.0.1 in Red Hat Enterprise Linux RHEL 3 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file, related to the "dhcpd -t" command...

Openswan Insecure File Creation

!/bin/bash uglyswan - OpenSwan local root exploit CVE-2008-4190 description: The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the 1 ipseclive.conn and 2...

Openswan <= 2.4.12/2.6.16 Insecure Temp File Creation Root Exploit

Exploit for linux platform in category local exploits ================================================================== Openswan /etc/passwd' /tmp/ipseclive.conn rm /tmp...

Openswan 2.4.12/2.6.16 - Insecure Temp File Creation Privilege Escalation

!/bin/bash uglyswan - OpenSwan local root exploit CVE-2008-4190 description: The IPSEC livetest tool in Openswan 2.4.12 and earlier, and 2.6.x through 2.6.16, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the 1 ipseclive.conn and 2...

xscreensaver 5.01 Arbitrary File Disclosure Symlink Attack Vulnerability

Exploit for multiple platform in category local exploits ======================================================================== xscreensaver 5.01 Arbitrary File Disclosure Symlink Attack Vulnerability ======================================================================== xscreensaver local...

xscreensaver 5.01 Arbitrary File Disclosure Symlink Attack Vulnerability

No description provided by source. xscreensaver local arbitrary file disclosure | symlink attack The �xscreensaver� program distributed normally with Xorg can be abused to disclose local files owned by other users also of the root account. Xscreensaver has the setuid bit on by default Example...

xscreensaver 5.01 - Arbitrary File Disclosure Symlink

xscreensaver local arbitrary file disclosure | symlink attack The �xscreensaver� program distributed normally with Xorg can be abused to disclose local files owned by other users also of the root account. Xscreensaver has the setuid bit on by default Example: Opensolaris The xscreensaver...

xscreensaver 5.01 - Arbitrary File Disclosure Symlink

xscreensaver 5.01 - Arbitrary File Disclosure Symlink xscreensaver local arbitrary file disclosure | symlink attack The �xscreensaver� program distributed normally with Xorg can be abused to disclose local files owned by other users also of the root account. Xscreensaver has the setuid bit on...

xscreensaver Symlink Attack

xscreensaver local arbitrary file disclosure | symlink attack The ´xscreensaver´ program distributed normally with Xorg can be abused to disclose local files owned by other users also of the root account. Xscreensaver has the setuid bit on by default Example: Opensolaris The xscreensaver program...

Mandrake Security Advisory MDVSA-2009:142 (jasper)

The remote host is missing an update to jasper announced via advisory MDVSA-2009:142. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Linux Security Advisory : jasper (MDVSA-2009:142-1)

Multiple security vulnerabilities has been identified and fixed in jasper : The jpcqcxgetcompparms function in jpc/jpccs.c for the JasPer JPEG-2000 library libjasper before 1.900 allows remote user-assisted attackers to cause a denial of service crash and possibly corrupt the heap via malformed...

CVE-2009-1962

Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the 1 xfig-epsPID, 2 xfig-picPID.pix, 3 xfig-picPID.err, 4 xfig-pcxPID.pix, 5 xfig-xfigrcPID, 6 xfigPID, 7 xfig-printPID, 8 xfig-exportPID.err, 9 xfig-batchPID, 10 xfig-expPID, or 11 xfig-spell.PID...

DEBIAN-CVE-2009-1962

Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the 1 xfig-epsPID, 2 xfig-picPID.pix, 3 xfig-picPID.err, 4 xfig-pcxPID.pix, 5 xfig-xfigrcPID, 6 xfigPID, 7 xfig-printPID, 8 xfig-exportPID.err, 9 xfig-batchPID, 10 xfig-expPID, or 11 xfig-spell.PID...

CVE-2009-1962

Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the 1 xfig-epsPID, 2 xfig-picPID.pix, 3 xfig-picPID.err, 4 xfig-pcxPID.pix, 5 xfig-xfigrcPID, 6 xfigPID, 7 xfig-printPID, 8 xfig-exportPID.err, 9 xfig-batchPID, 10 xfig-expPID, or 11 xfig-spell.PID...

Code injection

Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the 1 xfig-epsPID, 2 xfig-picPID.pix, 3 xfig-picPID.err, 4 xfig-pcxPID.pix, 5 xfig-xfigrcPID, 6 xfigPID, 7 xfig-printPID, 8 xfig-exportPID.err, 9 xfig-batchPID, 10 xfig-expPID, or 11 xfig-spell.PID...

UBUNTU-CVE-2009-1962

Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the 1 xfig-epsPID, 2 xfig-picPID.pix, 3 xfig-picPID.err, 4 xfig-pcxPID.pix, 5 xfig-xfigrcPID, 6 xfigPID, 7 xfig-printPID, 8 xfig-exportPID.err, 9 xfig-batchPID, 10 xfig-expPID, or 11 xfig-spell.PID...

CVE-2009-1962

Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the 1 xfig-epsPID, 2 xfig-picPID.pix, 3 xfig-picPID.err, 4 xfig-pcxPID.pix, 5 xfig-xfigrcPID, 6 xfigPID, 7 xfig-printPID, 8 xfig-exportPID.err, 9 xfig-batchPID, 10 xfig-expPID, or 11 xfig-spell.PID...