8933 matches found
CVE-2008-5379
Summary: CVE-2008-5379 affects netdisco-mibs-installer 1.0. A local attacker can exploit a symlink attack on the temporary file /tmp/netdisco-mibs-0.6.tar.gz to overwrite arbitrary files, related to the netdisco-mibs-install and netdisco-mibs-download scripts. The vulnerability is labeled as loca...
CVE-2008-5375
cmus-status-display in cmus 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cmus-status temporary file...
CVE-2008-5377
CVE-2008-5377 : A local privilege-escalation in CUPS 1.3.8 via the pstopdf filter. The vulnerability arises from a symlink attack on the temporary file /tmp/pstopdf.log, allowing local users to overwrite arbitrary files and potentially gain elevated privileges. Public references include exploit-d...
CVE-2008-5380
Gpsdrive (gpsdrive-scripts) has multiple local-privilege vectors via symlink attacks in /tmp (geo-*.coords, geo.google, geo.yahoo, geo.# etc.), affecting versions around 2.09–2.10~pre4. The root cause is insecure temporary-file handling in geo-code/geo-nearest and related scripts, allowing local ...
CVE-2008-5375
cmus-status-display in cmus 2.2.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cmus-status temporary file...
CVE-2008-5374
bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb.? temporary file, related to the 1 aliasconv.sh, 2 aliasconv.bash, and 3 cshtobash scripts...
CVE-2008-5375
CVE-2008-5375 affects cmus 2.2.0: cmus-status-display does not securely handle the /tmp/cmus-status temporary file, allowing a local attacker to perform a symlink attack and overwrite arbitrary files with the privileges of the running user. The issue is local in scope and tied to insecure tempora...
CVE-2008-5372
The CVE-2008-5372 entry concerns sdm-login in sdm-terminal 0.4.0b, where a local user can exploit a symlink vulnerability to overwrite the temporary file /tmp/sdm.autologin.once. This is a local privilege issue that can impact confidentiality and integrity (as indicated by the CVE data) through a...
CVE-2008-5368
muttprint in muttprint 0.72d allows local users to overwrite arbitrary files via a symlink attack on the /tmp/muttprint.log temporary file...
CVE-2008-5378
CVE-2008-5378 : The arb-kill utility (arb 0.0.20071207.1) is vulnerable to a local privilege escalation via a symlink attack on a /tmp/arb_pids__ file, allowing a local user to overwrite arbitrary files. The issue is rooted in unsafe handling of the temporary file used by arb, enabling a symlink ...
CVE-2008-5374
bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb.? temporary file, related to the 1 aliasconv.sh, 2 aliasconv.bash, and 3 cshtobash scripts...
CVE-2008-5373
mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mtx. temporary file, probably a related issue to CVE-2005-2995...
CVE-2008-5367
ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file...
CVE-2008-5366
The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/probe-finished or 2 /tmp/ppp-errors temporary file...
CVE-2008-5374
CVE-2008-5374 affects Bash 3.2 where bash-doc allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb#####.? temporary file, related to aliasconv.sh, aliasconv.bash, and cshtobash. The vulnerability arises from insecure temporary file handling in the Bash documentation/s...
CVE-2008-5370
CVE-2008-5370 affects pvpgn 1.8.1 through the pvpgn-support-installer component. A symlink attack on the temporary file /tmp/pvpgn-support-1.0.tar.gz allows local users to overwrite arbitrary files. Root cause is a race in creating or handling the temporary tarball, enabling file replacement prio...
CVE-2008-5371
screenie in screenie 1.30.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.screenie. temporary file...
CVE-2008-5367
ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file...