8708 matches found
[Full-disclosure] [ZH2005-16SA] Insecure temporary file creation in Skype for Linux
ZH2005-16SA Insecure temporary file creation in Skype for Linux Application: Skype for Linux Version affected: = 1.1.0.20 Vendor website : http://www.skype.com Author: Giovanni Delvecchio e-mail: [email protected] About Skype ======== Skype is a free program that uses the latest P2P technolog...
CVE-2002-2051
The processorweb plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in a log file...
CVE-2002-2051
The CVE-2002-2051 entry concerns the processor_web plugin for ModLogAn (versions 0.5.0 through 0.7.11) when used with the splitby option. The vulnerability arises from a symlink-based attack targeting files specified as hostnames in a log file, allowing local attackers to overwrite arbitrary file...
CVE-2002-2001
jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2002-2001
The CVE relates to jmcce 1.3.8 on Mandrake 8.1. It creates log files in /tmp with predictable names, enabling a local user to perform a symlink attack to overwrite arbitrary files. Root-level risk is implied by Mandrake advisory context (jmcce runs with elevated privileges and writes logs to a wo...
FreeBSD : portupgrade -- insecure temporary file handling vulnerability (22f00553-a09d-11d9-a788-0001020eed82)
Simon L. Nielsen discovered that portupgrade handles temporary files in an insecure manner. This could allow an unprivileged local attacker to execute arbitrary commands or overwrite arbitrary files with the permissions of the user running portupgrade, typically root, by way of a symlink attack...
CVE-2005-2240
xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file...
CVE-2005-2231
High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2231
The CVE-2005-2231 issue affects Heartbeat (High Availability Linux) 1.2.3, where a symlink attack on temporary files allows local users to overwrite arbitrary files. This is a local-privilege concern with incomplete impact (I:P; C:N; A:N) as documented. Debian advisories note the fix to version 1...
CVE-2005-2240
xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file...
CVE-2005-2240
The CVE-2005-2240 entry concerns xpvm 1.2.5, where xpvm. tcl can overwrite arbitrary files via a local symlink to xpvm.trace.$user. Debian/DSA-1003-1 fixes the issue by updating xpvm to corrected packages (e.g., 1.2.5-7.3sarge1 and related revisions); other OpenVAS/NVD/CVE listings corroborate th...
CVE-2005-2231
High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2231
High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2231
High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
DEBIAN-CVE-2005-2231
High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2240
xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file...
CVE-2005-2231
High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
shtool: insecure temporary file creation
Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary file, a different vulnerability than CVE-2005-1759...
CVE-2005-1916
CVE-2005-1916 is documented in ekg-related advisories as a local vulnerability in the ekg package (linki.py contributed script). The issue arises from insecure temporary-file handling in contributed scripts, which can be exploited by a local attacker to overwrite/create files and, in at least som...