CVE-2008-5155

mail2sms.sh in smsclient 2.0.8z allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/header. or 2 /tmp/body. temporary file, or append data to arbitrary files via a symlink attack on the 3 /tmp/sms.log temporary file...

CVE-2008-5150

sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-..log temporary file...

CVE-2008-5150

sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-..log temporary file...

CVE-2008-5144

nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvidia-cg-toolkit-manifest temporary file...

CVE-2008-5149

fwdcheck.sh in libncbi6 6.1.20080302 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ temporary file...

CVE-2008-5146

add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file...

CVE-2008-5135

os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/mounted-map or 2 /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating "the insecure code path should only ever run inside a d-i environment, which has no non-roo...

CVE-2008-5139

CVE-2008-5139 affects the jailer component (updatejail) of the chroot maintenance tool Jailer. The vulnerability arises from generation of a predictable temporary filename, allowing local users to perform a symlink attack on a file like /tmp/#####.updatejail and overwrite arbitrary files, potenti...

CVE-2008-5142

sendbug in freebsd-sendpr 3.113+5.3 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pr. temporary file...

CVE-2008-5141

CVE-2008-5141 affects flamethrower up to version 0.1.8, where local users can overwrite arbitrary files through a symlink attack on a temporary file in /tmp (multicast.tar).##### The Debian advisory DSA-1676-1 fixes this in flamethrower 0.1.8-1+etch1 for etch, and Debian unstable sid received an ...

CVE-2008-5151

CVE-2008-5151 affects mayavi 1.5. The issue is a symlink attack on the temporary file /tmp/err.log, allowing local users to overwrite arbitrary files. The connected documents confirm this as the underlying vulnerability, with no additional exploit details or remediation provided in the available ...

CVE-2008-5135

The CVE refers to os-prober 1.17, where a local user can exploit a symlink to overwrite files via /tmp/mounted-map or /tmp/raided-map. The core issue is a symlink/temporary file handling path in the insecure code path. Several connected sources (NVD, Red Hat, Debian/Ubuntu advisories, and Nessus ...

CVE-2008-5140

trend-autoupdate.new in mailscanner 4.55.10 and other versions before 4.74.16-1 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/opr.ini. or 2 /tmp/lpt.zip temporary file...

CVE-2008-5156

The CVE-2008-5156 entry concerns systemimager-server 3.6.3, specifically the si_mkbootserver component. A local attacker can exploit a symlink race to overwrite arbitrary files via temporary files in /tmp (either .inetd.conf or pxe.conf. .tmp). This results in a local, non-remote attack with impa...

CVE-2008-5148

sch2eaglepos.sh in geda-gnetlist 1.4.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ temporary file...

CVE-2008-5153

spell-check-logic.cgi in Moodle 1.8.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/spell-check-debug.log, 2 /tmp/spell-check-before, or 3 /tmp/spell-check-after temporary file...

CVE-2008-5149

The CVE-2008-5149 entry affects fwd_check.sh within libncbi6 6.1.20080302, enabling a local user to overwrite arbitrary files via a symlink attack on a /tmp/##### temporary file. This is a local-privilege-related vulnerability with impact to confidentiality, integrity, and availability as describ...

CVE-2008-5145

ltpmenu in ltp 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/runltp.mainmenu. temporary file...

CVE-2008-5151

testparser.py in mayavi 1.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/err.log temporary file...

CVE-2008-5150

CVE-2008-5150 affects maildirsync 1.1, where sample.sh allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-*.#####.log temporary file. The underlying issue is a symlink-based path manipulation in a temporary log file, enabling local write access to targ...