CVE-2008-4935

CVE-2008-4935 affects the aview image viewer (version 1.3.0) and is caused by insecure temporary file handling: it uses a path like /tmp/aview$$$.pgm, enabling a local attacker to perform a symlink attack and overwrite arbitrary files with the privileges of the running user. Impact is described a...

CVE-2008-4947

dhis-dummy-log-engine in dhis-server 5.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/dhis-dummy-log-engine.log temporary file...

CVE-2008-4940

xmlfile.py in aptoncd 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/aptoncd temporary file...

CVE-2008-4958

CVE-2008-4958 : gdrae 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gdrae/palabra temporary file. The underlying issue is a symlink race in temporary-file handling. The impact is described as complete confidentiality, integrity, and availability for a local ...

CVE-2008-4960

CVE-2008-4960 affects the impose+ 0.2 package. The vulnerability allows local users to overwrite arbitrary files via a symlink attack on temporary files: (1) /tmp/-tmp.ps and (2) /tmp/bboxx- . The connected sources consistently describe this local overwrite risk but do not provide detailed exploi...

CVE-2008-4941

CVE-2008-4941 affects arb-common 0.0.20071207.1. Local users can overwrite arbitrary files via a symlink attack on temporary files: /tmp/arb_fdnaml_, /tmp/arb_pids_ , /tmp/arbdsmz.html, and /tmp/arbdsmz.htm, related to the arb_fastdnaml and dszmconnect.pl scripts. Documented impact is local privi...

CVE-2008-4956

The CVE-2008-4956 issue affects Firewall Builder (fwbuilder) version around 2.1.19, specifically the fwb_install script. A local attacker can exploit a symlink/temporary file handling to overwrite arbitrary files in the system (via /tmp/ssh-agent). This represents a local privilege escalation ris...

CVE-2008-4952

emacs-jabber in emacs-jabber 0.7.91 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.log temporary file...

CVE-2008-4938

aegis 4.24 and aegis-web 4.24 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/, b /tmp/.intro, c /tmp/aegis..ae, d /tmp/aegis., e /tmp/aegis..1, f /tmp/aegis..2, g /tmp/aegis..log, and h /tmp/aegis..out temporary files, related to the 1 bngdvlpd.sh, 2 bngrvwd.sh, 3...

CVE-2008-4953

FireHOL 1.256 is affected by a local vulnerability allowing unprivileged users to overwrite temporary files via a symlink attack on /tmp/.firehol-tmp-#####-- and /tmp/firehol.conf. The vendor disputes the issue, claiming exploitation requires creating a large number of symlinks. Connected sources...

CVE-2008-4959

CVE-2008-4959 affects gpsdrive-scripts (2.10~pre4). A symlink attack allows a local user to overwrite arbitrary files via temporary files (e.g., /tmp/geo.google, /tmp/geo.yahoo, /tmp/geo.coords, /tmp/geo#####.coords). Multiple sources (Red Hat, SUSE, Fedora advisories and open-source references) ...

CVE-2008-4942

CVE-2008-4942 affects audiolink 0.05. A local symlink attack could cause overwriting of arbitrary files via temporary files /tmp/audiolink.db.tmp and /tmp/audiolink.tb.tmp. The connected documents confirm the vulnerable component and the attack surface; exploitation details and remediation are no...

CVE-2008-4951

dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...

CVE-2008-4941

arb-common 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/arbfdnaml, b /tmp/arbpids, c /tmp/arbdsmz.html, and d /tmp/arbdsmz.htm temporary files, related to the 1 arbfastdnaml and 2 dszmconnect.pl scripts...

CVE-2008-4942

audiolink in audiolink 0.05 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/audiolink.db.tmp and 2 /tmp/audiolink.tb.tmp temporary files...

CVE-2008-4943

CVE-2008-4943 affects bulmages-servers 0.11.1 and allows local users to overwrite arbitrary files via a symlink attack targeting temporary files such as /tmp/error.txt and /tmp/errores.txt, with possible impact on related scripts (creabulmafact, creabulmacont, actualizabulmacont, installbulmages-...

CVE-2008-4951

CVE-2008-4951 affects dtc 0.29.6, enabling local users to overwrite arbitrary files through a symlink attack on /tmp/awstats.log, /tmp/spam.log.#####, and /tmp/spam_err.log, related to the accesslog.php and sa-wrapper scripts. The cited sources (NVD, SUSE, Ubuntu, CVE records) confirm the local a...

CVE-2008-4955

freevo.real in freevo 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/-.pid, 2 /tmp/freevo-gdb, 3 /tmp/freevo-gdb.sh, and 4 /tmp/.stats temporary files. NOTE: this issue is only a vulnerability when a verbose debug mode is activated by modifying source code...

CVE-2008-4936

The CVE-2008-4936 issue affects mgetty 1.1.36 (faxspool). Local users can overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file, due to insecure temporary file handling in faxspool. The vulnerability is exploitable locally with no authentication required. A mitigatio...

CVE-2008-4939

CVE-2008-4939 affects apertium 3.0.7 and enables local users to overwrite arbitrary files via a symlink attack on temporary files created by apertium-gen-deformat, apertium-gen-reformat, and related scripts (files such as /tmp/#####.lex.cc, /tmp/#####.deformat.l, /tmp/#####.reformat.l, /tmp/#####...