8958 matches found
CVE-2008-4475
CVE-2008-4475 affects ibackup 2.27, where a local user can overwrite arbitrary files via a symlink attack on temporary files. The root cause is a symlink/temporary-file handling flaw that permits local privilege impact (as indicated by the CVE entry and NVD description). Documented impact notes s...
CVE-2008-4474
freeradius-dialupadmin in freeradius 2.0.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files in 1 backupradacct, 2 cleanradacct, 3 monthlytotstats, 4 totstats, and 5 truncateradacct...
CVE-2008-4475
ibackup 2.27 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2008-4476
sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympaaliases.$$ temporary file. NOTE: wwsympa.fcgi was also reported, but the issue occurred in a dead function, so it is not a vulnerability...
CVE-2008-4476
sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympaaliases.$$ temporary file. NOTE: wwsympa.fcgi was also reported, but the issue occurred in a dead function, so it is not a vulnerability...
CVE-2008-4406
A certain Debian patch to the run scripts for sabre aka xsabre 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files...
CVE-2008-4406
A certain Debian patch to the run scripts for sabre aka xsabre 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files...
Code injection
A certain Debian patch to the run scripts for sabre aka xsabre 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files...
CVE-2008-4406
A certain Debian patch to the run scripts for sabre aka xsabre 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files...
CVE-2008-4406
The CVE-2008-4406 entry describes a Debian patch to the sabre (xsabre) 0.2.4b run scripts that enables local users to delete or overwrite arbitrary files via a symlink attack on unspecified .tmp files. Root cause: a symlink vulnerability in the patch path that affects local users. Impact per sour...
CVE-2008-4192
The pservershutdown function in fenceegenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file...
CVE-2008-3524
rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or directory under 1 /var/lock or 2 /var/run...
Design/Logic Flaw
The pservershutdown function in fenceegenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file...
Design/Logic Flaw
rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or directory under 1 /var/lock or 2 /var/run...
CVE-2008-3524
rc.sysinit in initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms allows local users to delete arbitrary files via a symlink attack on a file or directory under 1 /var/lock or 2 /var/run...
CVE-2008-4192
CVE-2008-4192 affects CMAN fence_egenera (cman 2.20080629/2.20080801); local attacker can overwrite arbitrary files via a symlink attack on /tmp/eglog. Connected advisories reference Red Hat/CentOS fence updates (RHSA-2011:0266, RHBA-2010:0266) and Ubuntu USN-875-1 confirming insecure temporary f...
CVE-2008-3524
CVE-2008-3524 : The initscripts package (rc.sysinit) vulnerability allows local users to delete arbitrary files via a symlink attack on files under /var/lock or /var/run. Affected: initscripts before 8.76.3-1 on Fedora 9 and other Linux platforms. Root cause implied: race/symlink handling in rc.s...
CVE-2008-4192
The pservershutdown function in fenceegenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file...