8696 matches found
CVE-2004-1167
mirrorselect before 0.89 creates temporary files in a world-writable location with predictable file names, which allows remote attackers to overwrite arbitrary files via a symlink attack...
CVE-2004-0770
CVE-2004-0770 affects romload.c in DGen Emulator 1.23 and earlier. The vulnerability arises during decompression of ROM files compressed with gzip or bzip, where a symlink attack on temporary files enables a local attacker to overwrite arbitrary files. Impact is local file overwrite; no exploit d...
CVE-2004-0770
romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of 1 gzip or 2 bzip ROM files...
CVE-2004-0770
romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of 1 gzip or 2 bzip ROM files...
[Full-Disclosure] [ GLSA 200412-05 ] mirrorselect: Insecure temporary file creation
Gentoo Linux Security Advisory GLSA 200412-05:02 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...
Mandrake Linux Security Advisory : gzip (MDKSA-2004:142)
The Trustix developers found some insecure temporary file creation problems in the zdiff, znew, and gzeze supplemental scripts in the gzip package. These flaws could allow local users to overwrite files via a symlink attack. A similar problem was fixed last year CVE-2003-0367 in which this same...
Mandrake Linux Security Advisory : lvm (MDKSA-2004:144)
The Trustix developers discovered that the lvmcreateinitrd script, part of the lvm1 package, created a temporary directory in an insecure manner. This could allow for a symlink attack to create or overwrite arbitrary files with the privileges of the user running the script. The updated packages...
Mandrake Linux Security Advisory : openssl (MDKSA-2004:147)
The Trustix developers found that the derchop script, included in the openssl package, created temporary files insecurely. This could allow local users to overwrite files using a symlink attack. The updated packages have been patched to prevent this problem. %NASLMINLEVEL 70300 C Tenable Network...
CVE-2004-1110
The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file...
CVE-2004-1108
CVE-2004-1108 affects Gentoo: Gentoo Portage (dispatch-conf) and Gentoolkit’s qpkg query tool, with the vulnerable component being temporary file handling. Gentoolkit 0.2.0_pre10 and earlier uses predictable names in the temporary directory, enabling a local attacker to create a symlink to a targ...
CVE-2004-1107
dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-0996
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2004-0996
CVE-2004-0996 affects cscope 15-4 and 15-5 where main.c creates temporary files with predictable names, enabling local symlink attacks to overwrite arbitrary files. The issue is a local-security vulnerability arising from insecure temporary file creation. Publicly documented fixes show upgrades t...
CVE-2004-1108
qpkg in Gentoolkit 0.2.0pre10 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary directory...
CVE-2004-1107
CVE-2004-1107 affects Portage (dispatch-conf) on Gentoo prior to version 2.0.51-r3, where dispatch-conf and Gentoolkit’s qpkg use predictable temporary file names. A local attacker can exploit a symlink to overwrite arbitrary files, with the overwrite occurring under the invoking user’s privilege...
CVE-2004-0996
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2004-1110
The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file...
CVE-2004-1110
The CVE concerns mtink status monitor for Epson printers; versions prior to 1.0.5 allow local users to overwrite arbitrary files via a symlink attack on the Epson temporary file. Root cause: insecure temporary file handling. Impact: local integrity impact. Mitigation: upgrade to 1.0.5 or later.
Debian DSA-603-1 : openssl - insecure temporary file
Trustix developers discovered insecure temporary file creation in a supplemental script derchop of the openssl package which may allow local users to overwrite files via a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
