CVE-2005-1066

Race condition in rpdump in Pine 4.62 and earlier allows local users to overwrite arbitrary files via a symlink attack...

[SA14899] Pine rpdump File Creation Race Condition Vulnerability

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Pine rpdump File Creation Race Condition Vulnerability...

portupgrade -- insecure temporary file handling vulnerability

Simon L. Nielsen discovered that portupgrade handles temporary files in an insecure manner. This could allow an unprivileged local attacker to execute arbitrary commands or overwrite arbitrary files with the permissions of the user running portupgrade, typically root, by way of a symlink attack...

Debian DSA-704-1 : remstats - tempfile, missing input sanitising

Jens Steube discovered several vulnerabilities in remstats, the remote statistics system. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-0387 When processing uptime data on the unix-server a temporary file is opened in an insecure fashion which cou...

CVE-2005-1025

CVE-2005-1025 : The AS/400 4.3 FTP server, when running in IFS mode, is vulnerable to a symlink attack via RCMD and the ADDLNK utility, enabling remote attackers to obtain sensitive information from the QSYS.LIB library. The issue is documented with a MEDIUM severity (CVSS v2 base score 5.0). No ...

CVE-2005-1025

The FTP server in AS/400 4.3, when running in IFS mode, allows remote attackers to obtain sensitive information via a symlink attack using RCMD and the ADDLNK utility, as demonstrated using the QSYS.LIB library...

CVE-2005-0990

CVE-2005-0990 affects sharutils 4.2.1, specifically unshar.c, where a local user can perform a symlink attack on the unsh.X temporary file to overwrite arbitrary files. This is described across multiple sources (NVD entry for CVE-2005-0990, Debian/OSV references, and Red Hat/CentOS advisories) an...

CVE-2005-0990

unshar unshar.c in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file...

CVE-2005-0990

unshar unshar.c in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file...

CVE-2005-0387

remstats 1.0.13 and earlier, when processing uptime data, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-0387

CVE-2005-0387 affects remstats up to version 1.0.13. When processing uptime data, it opens a temporary file insecurely, enabling a local user to create or overwrite arbitrary files via a symlink attack. This is a local–privilege issue tied to the remstats user permissions. Debian DSAs fix this in...

CVE-2005-0894

The CVE-2005-0894 issue affects OpenMosixview 1.5 (OpenmosixView) and its OpenMosixcollector daemon. A symlink attack allows local users to overwrite or delete arbitrary files by exploiting insecure temporary file handling in the openmosixcollector directory and in nodes.tmp. Connected advisories...

CVE-2005-0894

OpenmosixCollector and OpenMosixView in OpenMosixView 1.5 allow local users to overwrite or delete arbitrary files via a symlink attack on 1 temporary files in the openmosixcollector directory or 2 nodes.tmp...

security flaw

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack...

CVE-2005-0866

CVE-2005-0866 affects cdrecord before 4:2.0. When DEBUG is enabled, it allows local users to overwrite arbitrary files via a symlink attack on temporary files. The issue is documented across NVD, Ubuntu, Mandrake advisories, and related CVE entries, which note that an updated package containing a...

CVE-2005-0866

cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

security flaw

The dcopidlng script in KDE 3.2.x and 3.3.x creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2005-0824

The vulnerability CVE-2005-0824 affects Mathopd’s internal_dump function. In Mathopd versions 1.5p0–1.5p4 (and 1.6x before 1.6b6 BETA), when running with -n, a local attacker can exploit a symlink attack on dump files triggered by a SIGWINCH signal to overwrite arbitrary files. This is due to imp...

CVE-2005-0824

The internaldump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dump files that are triggered by a SIGWINCH signal...

PT-2005-1853 · Mathopd · Mathopd

Name of the Vulnerable Software and Affected Versions: Mathopd versions 1.5p0 through 1.5p4 Mathopd versions 1.6x before 1.6b6 BETA Description: The issue allows local users to overwrite arbitrary files via a symlink attack on dump files triggered by a SIGWINCH signal when Mathopd is running with...