CVE-2008-1684

inetd on Sun Solaris 10, when debug logging is enabled, allows local users to write to arbitrary files via a symlink attack on the /var/tmp/inetd.log temporary file...

Arbitrary file deletion

inetd on Sun Solaris 10, when debug logging is enabled, allows local users to write to arbitrary files via a symlink attack on the /var/tmp/inetd.log temporary file...

CVE-2008-1684

CVE-2008-1684 affects Sun Solaris 10 where inetd with debug logging enabled allows a local user to write to arbitrary files via a symlink attack on /var/tmp/inetd.log. The vulnerability is triggered locally (attack vector: LOCAL) with integrity and confidentiality unaffected, but availability can...

CVE-2008-1684

inetd on Sun Solaris 10, when debug logging is enabled, allows local users to write to arbitrary files via a symlink attack on the /var/tmp/inetd.log temporary file...

Code injection

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

DEBIAN-CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

CVE-2008-1569

CVE-2008-1569 affects policyd-weight (0.1.14 beta-16 and earlier). A local attacker can exploit insecure temporary file handling used when creating a socket, via a symlink attack on the /tmp/.policyd-weight/ directory, potentially deleting arbitrary files or changing ownership to the polw user. R...

CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

CVE-2008-1417

The prerm script in axyl 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the axyl.conf temporary file...

Arbitrary file deletion

The prerm script in axyl 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the axyl.conf temporary file...

CVE-2008-1417

The prerm script in axyl 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the axyl.conf temporary file...

CVE-2008-1417

The prerm script in axyl 2.1.7 allows local users to overwrite arbitrary files via a symlink attack on the axyl.conf temporary file...

CVE-2008-1417

The CVE-2008-1417 entry concerns the prerm script in axyl 2.1.7, where a local user can overwrite arbitrary files via a symlink attack on the axyl.conf temporary file. Affected component: axyl 2.1.7 prerm script; root cause: symlink attack enabling local file overwrite. Impact is described as com...

GLSA-200803-25 : Dovecot: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200803-25 Dovecot: Multiple vulnerabilities Dovecot uses the group configured via the 'mailextragroups' setting, which should be used to create lockfiles in the /var/mail directory, when accessing arbitrary files CVE-2008-1199...

Adobe Acrobat Reader: Insecure temporary file creation

Background Acrobat Reader is a PDF reader released by Adobe. Description SUSE reported that the "acroread" wrapper script does not create temporary files in a secure manner when handling SSL certificates CVE-2008-0883. Impact A local attacker could exploit this vulnerability to overwrite arbitrar...

Design/Logic Flaw

Dovecot before 1.0.11, when configured to use mailextragroups to allow Dovecot to create dotlocks in /var/mail, might allow local users to read sensitive mail files for other users, or modify files or directories that are writable by group, via a symlink attack...