8958 matches found
CVE-2008-4936
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp. temporary file...
CVE-2008-4935
asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview.pgm temporary file...
CVE-2008-4960
impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/-tmp.ps and 2 /tmp/bboxx- temporary files...
CVE-2008-4948
CVE-2008-4948 affects fest.pl in digitaldj 0.7.5. A local user can overwrite arbitrary files through a symlink attack on the /tmp/ddj_fest.tmp file. The vulnerability arises from improper handling of symlinks in a temporary file, enabling local escalation that can impact confidentiality, integrit...
CVE-2008-4952
CVE-2008-4952 concerns emacs-jabber 0.7.91, where a local user can overwrite arbitrary files via a symlink attack on /tmp/*.log. The root cause is a symlink, enabling local exploitation and arbitrary file modification. Exploitation status and concrete patch/remediation details are not provided in...
CVE-2008-4959
geo-code in gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/geo.google, 2 /tmp/geo.yahoo, 3 /tmp/geo.coords, and 4 /tmp/geo.coords temporary files...
CVE-2008-4957
CVE-2008-4957 affects Kitware GCC-XML (gccxml) 0.9.0. The vulnerability arises from insecure temporary file handling in the find_flags routine, which creates/opens a file under /tmp/*.cxx in a way that allows a local attacker to exploit a symlink and overwrite arbitrary files. Impact: potential c...
CVE-2008-4937
CVE-2008-4937 affects OpenOffice.org’s senddoc in version 2.4.1, where a local attacker can exploit a symlink race on a /tmp/log.obr.##### file to overwrite arbitrary files. The vulnerability arises from insecure temporary-file handling, permitting local privilege impact (I: Partial; A: Partial) ...
CVE-2008-4949
CVE-2008-4949 affects dist 3.5. Local users can overwrite arbitrary files via a symlink attack on temporary files /tmp/cil#####, /tmp/pdo#####, and /tmp/pdn#####, related to the patcil and patdiff scripts. Root cause is a symlink-based race in handling these temporary files. The description does ...
CVE-2008-4944
CVE-2008-4944 affects writtercontrol in cdcontrol 1.90. The vulnerability arises from a symlink attack on temporary files /tmp/v-recorder*-out, allowing local users to overwrite arbitrary files. The description and multiple references confirm local write access due to improper handling of tempora...
CVE-2008-4949
dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cil, b /tmp/pdo, and c /tmp/pdn temporary files, related to the 1 patcil and 2 patdiff scripts...
CVE-2008-4954
mead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/debugbuf temporary file...
CVE-2008-4957
findflags in Kitware GCC-XML gccxml 0.9.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.cxx temporary file...
CVE-2008-4958
gdrae in gdrae 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gdrae/palabra temporary file...
CVE-2008-4945
amlabel-cdrw in cdrw-taper 0.4 might allow local users to overwrite arbitrary files via a symlink attack involving a /tmp/amlabel-cdrw. temporary directory...
CVE-2008-4939
apertium 3.0.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.lex.cc, b /tmp/.deformat.l, c /tmp/.reformat.l, d /tmp/docxorig, e /tmp/docxsalida.zip, f /tmp/xlsxembed, g /tmp/xlsxorig, and h /tmp/xslxsalida.zip temporary files, related to the 1...
PT-2008-6124 · Debian · Dpkg-Cross +1
Name of the Vulnerable Software and Affected Versions: dpkg-cross version 2.3.0 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. The vendor disputes this issue, stating that it only occurs under specific...
PT-2008-6127 · Firehol +1 · Firehol +1
Name of the Vulnerable Software and Affected Versions: firehol version 1.256 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files, specifically 1 /tmp/.firehol-tmp--- and 2 /tmp/firehol.conf. The vendor disputes this issue, stating that an...
PT-2008-6109 · Aview +1 · Aview +1
Name of the Vulnerable Software and Affected Versions: aview version 1.3.0 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview.pgm temporary file created by asciiview in aview. Recommendations: For aview version 1.3.0, consider restricting...