8708 matches found
CVE-2005-3341
DHIS tools DNS package dhis-tools-dns before 5.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files created by 1 register-q.sh and 2 register-p.sh...
CVE-2005-3341
DHIS tools DNS package (dhis-tools-dns) prior to version 5.0 is affected by a local-privilege issue where temporary files created by register-q.sh and register-p.sh can be overwritten via a symlink attack. This is documented in multiple sources (e.g., Debian DSA-928-1) and CVE-2005-3341. Affected...
CVE-2005-3341
DHIS tools DNS package dhis-tools-dns before 5.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files created by 1 register-q.sh and 2 register-p.sh...
CVE-2005-3343
CVE-2005-3343 affects tkdiff prior to 4.1.1, where a symlink attack on temporary files allows local users to overwrite arbitrary files. The root cause is insecure temporary file handling in tkdiff. Impact is local privilege/partial data compromise for files within the attacker's ability to place ...
CVE-2005-3341
DHIS tools DNS package dhis-tools-dns before 5.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files created by 1 register-q.sh and 2 register-p.sh...
security flaw
Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files...
USN-223-1: Inkscape vulnerability
Javier Fernández-Sanguino Peña discovered that Inkscape's ps2epsi.sh script, which converts PostScript files to Encapsulated PostScript format, creates a temporary file in an insecure way. A local attacker could exploit this with a symlink attack to create or overwrite arbitrary files with the...
DTSA-26-1 trackballs - symlink attack
Bulletin has no description...
CVE-2004-2634
Technical details about CVE-2004-2634 are not publicly provided in the supplied documents. The materials list the vulnerability description but do not include affected versions, exploit vectors, or remediation specifics. Monitor for updates.
CVE-2005-3885
The ps2epsi extension shell script ps2epsi.sh in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file...
CVE-2005-3885
The ps2epsi extension shell script ps2epsi.sh in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file...
DEBIAN-CVE-2005-3885
The ps2epsi extension shell script ps2epsi.sh in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file...
CVE-2005-3885
The ps2epsi extension shell script ps2epsi.sh in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file...
CVE-2005-3885
The ps2epsi extension shell script ps2epsi.sh in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file...
CVE-2005-3885
Inkscape is affected by CVE-2005-3885 due to a hardcoded temporary file in the ps2epsi extension shell script (ps2epsi.sh), enabling local users to perform a symlink attack and overwrite arbitrary files. Affected versions were prior to the fixed releases mentioned in multiple advisories, includin...
CVE-2004-2605
CVE-2004-2605 affects aStats 1.6.5, enabling local users to overwrite arbitrary files via a symlink attack targeting the aStats-Graphic-Signature-Generation file and certain PNG images. The root cause is a symlink attack that can bypass file protections, compromising file integrity for targeted f...
CVE-2005-3785
Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX eix before 0.5.0pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which is processed by the diff-eix program...
CVE-2005-3785
The CVE-2005-3785 issue affects eix (Ebuild IndeX) prior to 0.5.0_pre2, where a second-order symlink vulnerability in the eix-sync.in path allows a local user to overwrite arbitrary files via a symlink to the exi.X.sync temporary file, processed by diff-eix. Exploitation is local and depends on c...
[SECURITY] [DSA 907-1] New ipmenu packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 907-1 [email protected] http://www.debian.org/security/ Martin Schulze November 23rd, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 907-1] New ipmenu packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 907-1 [email protected] http://www.debian.org/security/ Martin Schulze November 23rd, 2005 http://www.debian.org/security/faq -...