CVE-2003-0887

The CVE-2003-0887 entry concerns ez-ipupdate (versions 3.0.11b7 and earlier) that creates insecure temporary cache files, enabling a local user to perform unauthorized operations via a symlink attack on the ez-ipupdate.cache file. The linked SUSE/other entries reiterate the same flaw without prov...

CVE-2005-3331

viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

DEBIAN-CVE-2005-3331

viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-3331

viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-3331

CVE-2005-3331 concerns the mgdiff 1.0 tool, where the function viewpatch enables a local user to overwrite arbitrary files by exploiting a symlink attack on temporary files. Root cause: inadequate handling of temporary file symlinks during viewpatch. Impact: local users could modify files they sh...

CVE-2005-3311

BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2004-2502

CVE-2004-2502 : The vulnerability affects im-switch before 11.4-46.1 on Fedora Core 2, where a symlink race on the imswitcher[PID] temporary file allows a local user to overwrite arbitrary files. The root cause is a race condition involving the temporary file used by im-switcher, enabling tamperi...

CVE-2004-2502

im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcherPID temporary file...

CVE-2005-3311

BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-3311

BMC Software Control-M 6.1.03 for Solaris (and possibly other platforms) is affected by a local symlink race that allows a local user to overwrite arbitrary files via temporary files. This vulnerability can impact integrity (partial) with no confidentiality/availability impact per the CVSS vector...

flexbackup default config insecure temporary file creation

flexbackup default config insecure temporary file creation Vendor: http://flexbackup.sourceforge.net/ Advisory: http://www.zataz.net/adviso/flexbackup-09192005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerabilities ared due to insecure temporary files...

Mandrake Linux Security Advisory : cfengine (MDKSA-2005:184)

Javier Fernndez-Sanguino Pea discovered several insecure temporary file uses in cfengine = 1.6.5 and = 2.1.16 which allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in. CVE-2005-2960 In addition, Javier discovered the cfmailfilter and cfcron.in...

USN-208-1: graphviz vulnerability

Javier Fernández-Sanguino Peña discovered that the "dotty" tool created and used temporary files in an insecure way. A local attacker could exploit this with a symlink attack to create or overwrite arbitrary files with the privileges of the user running dotty...

CVE-2005-2992

arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945...

DEBIAN-CVE-2005-2992

arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945...

CVE-2005-2992

arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945...

CVE-2005-2992

CVE-2005-2992 affects arc up to version 5.21j; vulnerability arises from a symlink attack on temporary files, allowing local users to overwrite arbitrary files. This is a local privilege issue with world-readable temporary files (per the SUSE advisory). Connected documents provide the affected co...

CVE-2005-2992

arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945...

CVE-2005-2992

arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945...

Debian DSA-848-1 : masqmail - several vulnerabilities

Jens Steube discovered two vulnerabilities in masqmail, a mailer for hosts without permanent internet connection. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2662 When sending failed mail messages, the address is not sanitised, which allows a...