CVE-2008-4946

CVE-2008-4946 affects convirt 0.8.2, where local users can overwrite arbitrary files via a symlink attack on the /tmp/set_output temporary file. The vulnerability is exercised through multiple provision.sh scripts (in template , Linux_CD_Install, Fedora_PV_Install, CentOS_PV_Install, common, exam...

CVE-2008-4939

apertium 3.0.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.lex.cc, b /tmp/.deformat.l, c /tmp/.reformat.l, d /tmp/docxorig, e /tmp/docxsalida.zip, f /tmp/xlsxembed, g /tmp/xlsxorig, and h /tmp/xslxsalida.zip temporary files, related to the 1...

CVE-2008-4942

audiolink in audiolink 0.05 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/audiolink.db.tmp and 2 /tmp/audiolink.tb.tmp temporary files...

CVE-2008-4956

fwbinstall in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent. temporary file...

CVE-2008-4947

The CVE-2008-4947 entry affects dhis-server 5.3, specifically the dhis-dummy-log-engine component. A local attacker can overwrite arbitrary files via a symlink attack on the /tmp/dhis-dummy-log-engine.log file. Public details describe the vulnerable file and attack class, but exploitation specifi...

CVE-2008-4955

CVE-2008-4955 affects freevo.real in freevo 1.8.1. The vulnerability permits local users to overwrite arbitrary files via a symlink attack on /tmp/-#####.pid, /tmp/freevo-gdb, /tmp/freevo-gdb.sh, and /tmp/ .stats. This flaw is exploitable only when verbose debug mode is activated by modifying sou...

CVE-2008-4950

gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments...

CVE-2008-4953

firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.firehol-tmp--- and 2 /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create 1073741824PID-RANGE symlinks...

CVE-2008-4950

CVE-2008-4950 affects dpkg-cross 2.3.0 and its gccross component, enabling local users to overwrite arbitrary files via a symlink attack on the temporary file tmp/gccross2.log. The vulnerability is consistently described across sources (NVD, Debian/GNU, Ubuntu trackers, OSV, and Nessus mention un...

CVE-2008-4945

CVE-2008-4945 affects amlabel-cdrw in cdrw-taper 0.4. A local user can exploit a symlink in /tmp/amlabel-cdrw to overwrite arbitrary files. Root cause: symlink attack during temporary directory handling. Impact: potential integrity and confidentiality impacts as described. No remediation details ...

CVE-2008-4954

CVE-2008-4954 affects mead.pl in fml 4.0.3. The issue arises from a symlink attack on the /tmp/debugbuf temporary file, enabling local users to overwrite arbitrary files. The connected records corroborate the vulnerability description but do not provide exploit code, affected versions beyond the ...

CVE-2008-4946

convirt 0.8.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/setoutput temporary file, related to the 1 template/provision.sh, 2 LinuxCDInstall/provision.sh, 3 FedoraPVInstall/provision.sh, 4 CentOSPVInstall/provision.sh, 5 common/provision.sh, 6...

CVE-2008-4960

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/-tmp.ps and 2 /tmp/bboxx- temporary files...

CVE-2008-4936

faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp. temporary file...

CVE-2008-4956

fwbinstall in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent. temporary file...

CVE-2008-4952

emacs-jabber in emacs-jabber 0.7.91 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.log temporary file...

CVE-2008-4950

gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments...

CVE-2008-4947

dhis-dummy-log-engine in dhis-server 5.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/dhis-dummy-log-engine.log temporary file...

CVE-2008-4949

dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cil, b /tmp/pdo, and c /tmp/pdn temporary files, related to the 1 patcil and 2 patdiff scripts...

CVE-2008-4953

firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.firehol-tmp--- and 2 /tmp/firehol.conf temporary files. NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create 1073741824PID-RANGE symlinks...