CVE-2008-5157

tau 2.16.4 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/makefile.tau.. or 2 /tmp/makefile.tau. temporary file, related to the a taucxx, b tauf90, and c taucc scripts...

CVE-2008-5156

simkbootserver in systemimager-server 3.6.3 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.inetd.conf or 2 /tmp/pxe.conf..tmp temporary file...

CVE-2008-5143

mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.debug or 2 /tmp/.env temporary file...

CVE-2008-5141

flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar. temporary file...

CVE-2008-5149

fwdcheck.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ temporary file...

CVE-2008-5148

sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ temporary file...

CVE-2008-5138

passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd. temporary file...

CVE-2008-5146

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file...

Design/Logic Flaw

nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvidia-cg-toolkit-manifest temporary file...

CVE-2008-5149

fwdcheck.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ temporary file...

CVE-2008-5154

The CVE-2008-5154 entry concerns bluetooth.rc in p3nfs 5.19, where local users can overwrite arbitrary files by exploiting a symlink attack against the /tmp/blue.log file. This is a local-privilege issue resulting from improper handling of temporary file names, enabling a limited-access user to a...

CVE-2008-5148

CVE-2008-5148 affects geda-gnetlist; the sch2eaglepos.sh script creates a temporary file insecurely in /tmp, enabling local symlink attacks to overwrite arbitrary files. Affected package: gEDA/gNetlist, specifically around version 1.4.0. Impact: local privilege/file overwrite risk. Mitigation: up...

CVE-2008-5156

simkbootserver in systemimager-server 3.6.3 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.inetd.conf or 2 /tmp/pxe.conf..tmp temporary file...

CVE-2008-5143

CVE-2008-5143 affects mgt-helper in multi-gnome-terminal 1.6.2. The vulnerability allows local users to overwrite arbitrary files via a symlink attack on temporary files in /tmp, specifically targeting files matching *.debug or *.env. The root cause is a symlink-related race condition during file...

CVE-2008-5152

CVE-2008-5152 affects mh-book 200605, specifically inmail-show, where local users can overwrite arbitrary files via a symlink attack to temporary files (/tmp/inmail#####.log or /tmp/inmail#####.stdin). The root cause is a symlink/TOCTOU race in handling these temp files. Documents consistently de...

CVE-2008-5135

os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/mounted-map or 2 /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating "the insecure code path should only ever run inside a d-i environment, which has no non-roo...

CVE-2008-5147

test-pipe-to-pyodconverter.org.sh in docvert 2.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/outer.odt temporary file...

CVE-2008-5157

tau 2.16.4 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/makefile.tau.. or 2 /tmp/makefile.tau. temporary file, related to the a taucxx, b tauf90, and c taucc scripts...

CVE-2008-5144

CVE-2008-5144 affects nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015. A local attacker can exploit a race with the temporary file /tmp/nvidia-cg-toolkit-manifest via a symlink attack to overwrite arbitrary files. The vulnerability is supported by multiple connected sources (NVD descrip...

CVE-2008-5140

CVE-2008-5140 : MailScanner 4.55.10 and other versions before 4.74.16-1 are vulnerable to local user symlink attacks that can overwrite arbitrary files via temporary files such as /tmp/opr.ini.##### and /tmp/lpt*.zip, exposing a local-privilege risk. The underlying issue is a symlink-based overwr...