8696 matches found
Debian DSA-661-2 : f2c - insecure temporary files
Dan McMahill noticed that our advisory DSA 661-1 did not correct the multiple insecure files problem, hence, this update. For completeness below is the original advisory text : Javier Fernandez-Sanguino Pena from the Debian Security Audit project discovered that f2c and fc, which are both part of...
CVE-2004-1181
htmlheadline before 21.8 allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-1181
CVE-2004-1181 corresponds to the Debian htmlheadline issue (DSA-622-1) involving insecure temporary files that allow local users to overwrite arbitrary files via a symlink attack. Public details in connected docs identify the vulnerable component as htmlheadline, with the root cause stemming from...
CVE-2005-0004
CVE-2005-0004 affects MySQL: the mysqlaccess script in MySQL 3.x, 4.0.23 and earlier, 4.1.x before 4.1.10, and 5.0.x before 5.0.3 allows local users to read or overwrite arbitrary files via a symlink attack on temporary files. Impact is local file access/ alteration. Remediation per sources: upgr...
PT-2005-1141 · Oracle +2 · Mysql Server +2
Name of the Vulnerable Software and Affected Versions: MySQL versions 3.x and earlier MySQL versions 4.0.23 and earlier MySQL versions 4.1.x before 4.1.10 MySQL versions 5.0.x before 5.0.3 Description: The issue allows local users to overwrite arbitrary files or read temporary files via a symlink...
security flaw
The krb5-send-pr script in the kerberos5 krb5 package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...
[SECURITY] [DSA 647-1] New mysql packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 647-1 [email protected] http://www.debian.org/security/ Martin Schulze January 19th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 647-1] New mysql packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 647-1 [email protected] http://www.debian.org/security/ Martin Schulze January 19th, 2005 http://www.debian.org/security/faq -...
CVE-2004-1000
The CVE-2004-1000 entry concerns the lintian Debian package checker. Affected software: lintian, versions up to 1.23 and earlier. Root cause: lintian removes the working directory even if it wasn’t created by lintian, enabling a symlink attack that could delete an unrelated or arbitrary file or d...
CVE-2004-1377
The CVE-2004-1377 issue affects the a2ps package: the fixps (fixps.in) and psmandup (psmandup.in) scripts allow local users to overwrite arbitrary files via a symlink attack on temporary files, with impact being partial integrity if exploited. Documentation in multiple advisories confirms this vu...
CVE-2004-1377
The 1 fixps aka fixps.in and 2 psmandup aka psmandup.in scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0014
CVE-2003-0014 details : The Debian bmv package (version 1.2 and earlier) is vulnerable to an insecure temporary-file creation flaw that allows a local attacker to overwrite arbitrary files via a symlink attack on temporary files. Debian’s DSA-633-1 describes the impact as local, with exploitation...
CVE-2003-0014
gsinterf.c in bmv 1.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-1377
The 1 fixps aka fixps.in and 2 psmandup aka psmandup.in scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-1000
lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack...
DSA-647-1 mysql - insecure temporary files
Bulletin has no description...
Debian DSA-647-1 : mysql - insecure temporary files
Javier Fernandez-Sanguino Pena from the Debian Security Audit Project discovered a temporary file vulnerability in the mysqlaccess script of MySQL that could allow an unprivileged user to let root overwrite arbitrary files via a symlink attack and could also could unveil the contents of a tempora...
CVE-2005-0069
The 1 tcltags or 2 vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files...
