CVE-2008-4968

The 1 rccs and 2 STUFF scripts in lmbench 3.0-a7 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/sdiff. temporary file...

CVE-2008-4973

i2myspell in myspell 3.1 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/i2my.1 and 2 /tmp/i2my.2 temporary files...

CVE-2008-4971

mafft-homologs in mafft 6.240 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/vf?????, 2 /tmp/if?????, 3 /tmp/pf?????, 4 /tmp/af?????, 5 /tmp/rid?????, 6 /tmp/res?????, 7 /tmp/q?????, and 8 /tmp/bf????? temporary files...

DEBIAN-CVE-2008-4968

The 1 rccs and 2 STUFF scripts in lmbench 3.0-a7 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/sdiff. temporary file...

DEBIAN-CVE-2008-4972

mailgo in mgt 2.31 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mailgo temporary file...

DEBIAN-CVE-2008-4964

filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any- temporary file...

DEBIAN-CVE-2008-4965

liguidsoap.py in liguidsoap 0.3.8.1+2 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/liguidsoap.liq, 2 /tmp/lig..log, and 3 /tmp/emission.ogg temporary files...

CVE-2008-4969

ltp-network-test 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/vsftpd.conf, b /tmp/udp/2/, c /tmp/tcp/2/, d /tmp/udp/3/, e /tmp/tcp/3/, f /tmp/nfsfsstress.udp.2.log, g /tmp/nfsfsstress.udp.3.log, h /tmp/nfsfsstress.tcp.2.log, i /tmp/nfsfsstress.tcp.3.log,...

CVE-2008-4972

mailgo in mgt 2.31 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mailgo temporary file...

DEBIAN-CVE-2008-4973

i2myspell in myspell 3.1 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/i2my.1 and 2 /tmp/i2my.2 temporary files...

CVE-2008-4972

mailgo in mgt 2.31 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mailgo temporary file...

Design/Logic Flaw

postfixgroups.pl in Postfix 2.5.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/postfixgroups.stdout, 2 /tmp/postfixgroups.stderr, and 3 /tmp/postfixgroups.message temporary files. NOTE: the vendor disputes this vulnerability, stating "This is not a real issue...

Code injection

linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/snap and b /tmp/nightly temporary files, related to the 1 maysnap and 2 maytest scripts...

Design/Logic Flaw

The 1 rccs and 2 STUFF scripts in lmbench 3.0-a7 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/sdiff. temporary file...

Code injection

liguidsoap.py in liguidsoap 0.3.8.1+2 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/liguidsoap.liq, 2 /tmp/lig..log, and 3 /tmp/emission.ogg temporary files...

Arbitrary file deletion

mailgo in mgt 2.31 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mailgo temporary file...

Design/Logic Flaw

delqueueask in rccp 0.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cccptmp.txt temporary file...

CVE-2008-4969

ltp-network-test 20060918 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/vsftpd.conf, b /tmp/udp/2/, c /tmp/tcp/2/, d /tmp/udp/3/, e /tmp/tcp/3/, f /tmp/nfsfsstress.udp.2.log, g /tmp/nfsfsstress.udp.3.log, h /tmp/nfsfsstress.tcp.2.log, i /tmp/nfsfsstress.tcp.3.log,...

CVE-2008-4986

wims 3.62 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/env, b /tmp/sed, and c /tmp/referer-home.log temporary files, related to the 1 coqweb and 2 account.sh scripts...

CVE-2008-4982

rkhunter in rkhunter 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rkhunter-debug temporary file. NOTE: this is probably a different vulnerability than CVE-2005-1270...