[SECURITY] [DSA 814-1] New lm-sensors packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 814-1 [email protected] http://www.debian.org/security/ Martin Schulze September 15th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 814-1] New lm-sensors packages fix insecure temporary file

-------------------------------------------------------------------------- Debian Security Advisory DSA 814-1 [email protected] http://www.debian.org/security/ Martin Schulze September 15th, 2005 http://www.debian.org/security/faq -...

CVE-2005-2918

gtkdiskfree (versions 1.9.3 and earlier) is affected by CAN-2005-2918/CVE-2005-2918 due to insecure creation of a temporary file, enabling local attackers to overwrite arbitrary files via a symlink attack. Impact is local access with the user’s privileges; no remote code execution is indicated in...

CVE-2005-2918

The opencmdtube function in mount.c for gtkdiskfree 1.9.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the gtkdiskfree temporary file...

DSA-814-1 lm-sensors - insecure temporary file

Bulletin has no description...

CVE-2005-2864

URBAN 1.5.31 allows local users to overwrite arbitrary files via a symlink attack on the 1 high score or 2 save game files...

CVE-2005-2851

smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the 1 smb4k.tmp or 2 sudoers temporary files...

CVE-2005-2851

smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the 1 smb4k.tmp or 2 sudoers temporary files...

DEBIAN-CVE-2005-2851

smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the 1 smb4k.tmp or 2 sudoers temporary files...

CVE-2005-2851

smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the 1 smb4k.tmp or 2 sudoers temporary files...

CVE-2005-2864

CVE-2005-2864 describes a local vulnerability in URBAN 1.5.3_1 where local users can overwrite arbitrary files through a symlink attack targeting the (1) high score or (2) save game files. The core root cause is a symlink-related file overwrite path that an unprivileged user can exploit, with a r...

CVE-2005-2851

CVE-2005-2851 affects smb4k and related versions prior to 0.6.3, enabling local users to read sensitive files via a symlink attack on temporary files (smb4k.tmp, or sudoers/super.tab). The underlying issue is that Smb4K writes contents to a target file pointed to by an insecure pre-existing symli...

CVE-2005-2864

URBAN 1.5.31 allows local users to overwrite arbitrary files via a symlink attack on the 1 high score or 2 save game files...

CVE-2005-2851

smb4k 0.4 and other versions before 0.6.3 allows local users to read sensitive files via a symlink attack on the 1 smb4k.tmp or 2 sudoers temporary files...

CVE-2005-2809

silc daemon silcd.c in Secure Internet Live Conferencing SILC 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.PID.stats temporary file...

CVE-2005-2809

The CVE-2005-2809 entry concerns the silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier. A local user can overwrite arbitrary files via a symlink attack on the silcd.[PID].stats temporary file, indicating a symlink/race condition in the temporary file handling. Conc...

CVE-2005-2809

silc daemon silcd.c in Secure Internet Live Conferencing SILC 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.PID.stats temporary file...

CVE-2005-2494

kcheckpass in KDE 3.2.0 up to 3.4.2 allows local users to gain root access via a symlink attack on lock files...

security flaw

cvsbug in CVS 1.12.12 and earlier creates temporary files insecurely, which allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack...

CVE-2005-2494

CVE-2005-2494 affects KDE kdebase/kcheckpass (kcheckpass in KDE 3.2.0 up to 3.4.2) where a symlink attack on /var/lock lock files can allow a local user to gain root privileges. Root cause: improper lock-file handling in kcheckpass. Affected environments include Red Hat/CentOS, Debian, Ubuntu adv...