CVE-2008-4983

CVE-2008-4983 affects scilab-bin 4.1.2. A local attacker can exploit insecure temporary file handling (symlink attacks) in the scilink, scidoc and scidem scripts to overwrite arbitrary files under /tmp and potentially affect files owned by the running user. Remediation per Gentoo GLSA 200901-14 i...

CVE-2008-4988

CVE-2008-4988 affects pscal in xcal 4.1. It allows local users to overwrite arbitrary files through a symlink race against a temporary file in /tmp/pscal#####, enabling an arbitrary file overwrite vulnerability. Root cause is a symlink attack on the temporary file; impact is local confidentiality...

CVE-2008-4967

CVE-2008-4967 affects linuxtrade 3.65, enabling local users to overwrite arbitrary files via a symlink attack on /tmp/bwk, /tmp/zzz, and /tmp/ggg. This is tied to the linuxtrade.bwkvol, linuxtrade.wn, and moneyam.helper scripts. Exploitation details are not provided in the supplied documents; no ...

CVE-2008-4979

CVE-2008-4979 affects rancid 2.3.2~a8. A local user can cause a symlink attack to overwrite arbitrary files via /tmp/ipacct.#####.prefixes, /tmp/ipacct.#####.sorted, /tmp/ipacct.#####.pl, and /tmp/ipacct.##### temporary files. The connected sources confirm the four symlink targets and local-write...

CVE-2008-4972

mailgo in mgt 2.31 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mailgo temporary file...

CVE-2008-4986

wims 3.62 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/env, b /tmp/sed, and c /tmp/referer-home.log temporary files, related to the 1 coqweb and 2 account.sh scripts...

CVE-2008-4970

CVE-2008-4970 affects the Lustre file system: the runiozone component on Lustre 1.6.5 allows a local user to overwrite arbitrary files through a symlink race against the temporary file /tmp/iozone.log. The underlying issue is a local-file overwrite via a symlink attack. Exploitation is local and ...

CVE-2008-4965

liguidsoap.py in liguidsoap 0.3.8.1+2 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/liguidsoap.liq, 2 /tmp/lig..log, and 3 /tmp/emission.ogg temporary files...

CVE-2008-4977

Affected software: Postfix 2.5.2. Vulnerability: postfix_groups.pl allows local users to overwrite arbitrary files via a symlink attack on temporary files (/tmp/postfix_groups.stdout, /tmp/postfix_groups.stderr, /tmp/postfix_groups.message). The issue is dependent on a symlink/temporary-file race...

CVE-2008-4986

CVE-2008-4986 affects wims 3.62, enabling local users to overwrite arbitrary files via a symlink attack targeting temporary files: /tmp/env#####, /tmp/sed#####, and /tmp/referer-home.log. The issue is related to the coqweb and account.sh scripts. The connected records reiterate the same vulnerabi...

CVE-2008-4966

linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/snap and b /tmp/nightly temporary files, related to the 1 maysnap and 2 maytest scripts...

CVE-2008-4987

xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/ldconfig.tmp, b /tmp/ldconf.tmp, and c /tmp/ld.so.conf temporary files, related to the 1 get-maptools.sh and 2 getshapelib.sh scripts...

CVE-2008-4969

The CVE-2008-4969 issue affects ltp-network-test 20060918, where local users can overwrite arbitrary files via a symlink attack on multiple /tmp paths (including /tmp/vsftpd.conf and several /tmp/nfs_fsstress.*.log/.sardata files) linked to the scripts ftp_setup_vsftp_conf and nfs_fsstress.sh. Th...

CVE-2008-4964

The CVE-2008-4964 entry concerns the konwert project (version 1.8) where the filters/any-UTF8 component is vulnerable. An attacker with local access can delete arbitrary files by exploiting a symlink attack on a temporary file named /tmp/any-#####. The description across sources consistently attr...

CVE-2008-4965

liguidsoap.py in liguidsoap 0.3.8.1+2 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/liguidsoap.liq, 2 /tmp/lig..log, and 3 /tmp/emission.ogg temporary files...

CVE-2008-4982

rkhunter in rkhunter 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rkhunter-debug temporary file. NOTE: this is probably a different vulnerability than CVE-2005-1270...

CVE-2008-4973

Removed by vendor...

PT-2008-6149 · Postfix · Postfix

Name of the Vulnerable Software and Affected Versions: Postfix version 2.5.2 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/postfix groups.stdout, /tmp/postfix groups.stderr, and /tmp/postfix groups.message temporary files. The vendor...

CVE-2008-4960

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/-tmp.ps and 2 /tmp/bboxx- temporary files...

CVE-2008-4946

convirt 0.8.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/setoutput temporary file, related to the 1 template/provision.sh, 2 LinuxCDInstall/provision.sh, 3 FedoraPVInstall/provision.sh, 4 CentOSPVInstall/provision.sh, 5 common/provision.sh, 6...