CVE-2007-3919

CVE-2007-3919 affects Xen 3.1 and earlier; the xenbaked and XenMon components allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm. This is a local-privilege issue that can enable data truncation. The MiracleLinux and OSV/OpenVAS/NASL entries corroborate Xen-related...

CVE-2007-3919

1 xenbaked and 2 xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm...

CVE-2002-2274

akfingerd 0.5 allows local users to read arbitrary files as the akfingerd user nobody via a symlink attack on the .plan file...

CVE-2002-2267

CVE-2002-2267 affects bogofilter 0.9.0.4 through a symlink attack on the bogopass temporary file, enabling local users to overwrite arbitrary files. Root cause: symlink race allowing file overwrite. Impact: local privilege/ integrity concerns as described (no public details on exploits). Remediat...

CVE-2002-2274

Affected software: akfingerd 0.5 (and earlier per linked records). Vulnerable component: the .plan file handling in akfingerd, exploited via a symlink attack that lets local users read arbitrary files as the akfingerd user (nobody). Impact: local read access to arbitrary files; CVSS notes show lo...

CVE-2002-2267

bogopass in bogofilter 0.9.0.4 allows local users to overwrite arbitrary files via a symlink attack on the bogopass temporary file...

CVE-2002-2267

bogopass in bogofilter 0.9.0.4 allows local users to overwrite arbitrary files via a symlink attack on the bogopass temporary file...

GLSA-200710-11 : X Font Server: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200710-11 X Font Server: Multiple Vulnerabilities iDefense reported that the xfs init script does not correctly handle a race condition when setting permissions of a temporary file CVE-2007-3103. Sean Larsson discovered an integer...

CVE-2007-5200

hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugindebugoptimresults.txt temporary file...

CVE-2007-5200

hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugindebugoptimresults.txt temporary file...

CVE-2007-5200

hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugindebugoptimresults.txt temporary file...

Design/Logic Flaw

hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugindebugoptimresults.txt temporary file...

DEBIAN-CVE-2007-5200

hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugindebugoptimresults.txt temporary file...

CVE-2007-5200

hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugindebugoptimresults.txt temporary file...

CVE-2007-5200

CVE-2007-5200 affects hugin on multiple distros (e.g., openSUSE, Fedora, Gentoo). It enables a local user to overwrite arbitrary files via an insecurely created hugin_debug_optim_results.txt, through a symlink attack. Documented impacts: local access with possible file overwrite of privileges; no...

Code injection

The 1 tramp-make-temp-file and 2 tramp-make-tramp-temp-file functions in Tramp 2.1.10 extension for Emacs, and possibly earlier 2.1.x versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2007-5377

The 1 tramp-make-temp-file and 2 tramp-make-tramp-temp-file functions in Tramp 2.1.10 extension for Emacs, and possibly earlier 2.1.x versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2007-5377

The 1 tramp-make-temp-file and 2 tramp-make-tramp-temp-file functions in Tramp 2.1.10 extension for Emacs, and possibly earlier 2.1.x versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2007-5377

The CVE concerns TRAMP (Emacs extension) specifically tramp-make-temp-file and tramp-make-tramp-temp-file in TRAMP 2.1.10 (and possibly earlier 2.1.x). The described flaw is insecure temporary file creation that enables a local attacker to exploit a symlink to overwrite arbitrary files within the...

GLSA-200710-05 : QGit: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200710-05 QGit: Insecure temporary file creation Raphael Marichez discovered that the DataLoader::doStart method creates temporary files in an insecure manner and executes them. Impact : A local attacker could perform a symlink...