8953 matches found
CVE-2008-5137
tkman in tkman 2.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/tkman or 2 /tmp/ll temporary file...
CVE-2008-5138
passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd. temporary file...
CVE-2008-5145
CVE-2008-5145 affects ltpmenu in ltp (20060918). Local users can overwrite arbitrary files via a symlink attack on the temporary file /tmp/runltp.mainmenu.#####, enabling potential local privilege impact. The records do not specify a vendor patch or fix version in the provided documents. The root...
CVE-2008-5141
flamethrower in flamethrower 0.1.8 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/multicast.tar. temporary file...
CVE-2008-5138
passwdehd in libpam-mount 0.43 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/passwdehd. temporary file...
CVE-2008-5157
Removed by vendor...
CVE-2008-5135
os-prober in os-prober 1.17 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/mounted-map or 2 /tmp/raided-map temporary file. NOTE: the vendor disputes this issue, stating "the insecure code path should only ever run inside a d-i environment, which has no non-roo...
CVE-2008-5147
CVE-2008-5147 affects docvert 2.4 via a symlink attack in test-pipe-to-pyodconverter.org.sh that targets the temporary file /tmp/outer.odt. This local-access flaw allows local users to overwrite arbitrary files. The description and connected documents confirm the vulnerable component and the root...
CVE-2008-5138
CVE-2008-5138 affects libpam-mount (example: version 0.43) and is triggered by a local symlink attack targeting a temporary file named /tmp/passwdehd, allowing local users to overwrite arbitrary files. The connected advisories confirm a fix implemented as a security update for pam_mount in SUSE/o...
CVE-2008-5137
CVE-2008-5137 affects tkman 2.2 and is due to insecure handling of temporary files (/tmp/tkman##### and /tmp/ll), enabling local symlink attacks to overwrite arbitrary files. The issue is documented across multiple sources (Gentoo GLSA 200909-07, SUSE/OpenSUSE advisories, and OpenVAS/Nessus entri...
CVE-2008-5152
inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...
CVE-2008-5142
The affected component is sendbug in freebsd-sendpr 3.113+5.3 on Debian GNU/Linux. It is vulnerable to a local, pre-auth race where an attacker can overwrite arbitrary files through a symlink attack on a /tmp/pr.##### temporary file, indicating a local-privilege escalation/vector due to insecure ...
CVE-2008-5136
tkusr in tkusr 0.82 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/tkusr.pgm temporary file...
CVE-2008-5153
CVE-2008-5153 affects Moodle: local attackers could exploit a symlink-based race to overwrite arbitrary files via temporary files /tmp/spell-check-debug.log, /tmp/spell-check-before, or /tmp/spell-check-after. Initial description identifies Moodle 1.8.2 as vulnerable with a local symlink attack. ...
CVE-2008-5157
The CVE-2008-5157 entry concerns tau 2.16.4. It describes a local-privilige escalation where local users can overwrite arbitrary files via a symlink attack targeting temporary files: /tmp/makefile.tau..##### or /tmp/makefile.tau .#####, associated with the tau_cxx, tau_f90, and tau_cc scripts. Th...
CVE-2008-5136
CVE-2008-5136 affects tkusr 0.82. A local user can exploit a symlink attack on the temporary file /tmp/tkusr.pgm to overwrite arbitrary files. The root cause is improper handling of the temporary file, enabling a local privilege escalation/vector. The CVE entry documents impact as complete confid...
CVE-2008-5154
bluetooth.rc in p3nfs 5.19 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/blue.log temporary file...
CVE-2008-5143
mgt-helper in multi-gnome-terminal 1.6.2 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/.debug or 2 /tmp/.env temporary file...