8694 matches found
CVE-2004-0655
eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file...
CVE-2004-0647
CVE-2004-0647 affects Shorewall: versions 1.4.10c and earlier, and 2.0.x before 2.0.3a, are vulnerable to a local symlink attack on the temporary file chains-$$, enabling a local user to overwrite arbitrary files. Connected advisories corroborate insecure temporary file handling and report potent...
CVE-2004-0647
shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file...
CVE-2004-0422
flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...
CVE-2004-0423
The logevent function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file...
CVE-2004-0404
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp...
CVE-2004-0423
The logevent function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file...
CVE-2004-0422
flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...
DEBIAN-CVE-2004-0423
The logevent function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file...
DEBIAN-CVE-2004-0404
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp...
CVE-2004-0404
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp...
DEBIAN-CVE-2004-0422
flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack...
RHEL 2.1 : python (RHSA-2003:048)
An insecure use of a temporary file has been found in Python. Python is an interpreted, interactive, object-oriented programming language. Zack Weinberg discovered that os.execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names. This could allow local users t...
CVE-2004-0581
CVE-2004-0581 affects Mandrake Linux 9.1–10.0 and Corporate Server 2.1, where the ksymoop s-gznm script allows local users to delete arbitrary files via a symlink attack on files in /tmp. The root cause, as described in related advisories, is improper checking when copying a file to /tmp, enablin...
CVE-2004-0581
ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp...
CVE-2004-0545
CVE-2004-0545 affects AIX 5.1 and 5.2 where the LVM component allows local users to overwrite arbitrary files via a symlink attack . The vulnerability is described as local-access, with the impact of potentially compromising file integrity via symlink tricks. Related Nessus entries for AIX 5.1/5....
CVE-2003-0193
The CVE-2003-0193 issue affects xlsview (part of catdoc) prior to 0.91.5, where msxlsview.sh could be abused via a symlink to overwrite arbitrary files with a predictable temporary name (word$$.html), enabling local privilege effects. Debian/DSA-575-1 fixes this by updating catdoc to a newer rele...
CVE-2003-0193
msxlsview.sh in xlsview for catdoc 0.91 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable temporary file names "word$$.html"...
