8694 matches found
CVE-2003-0440
The 1 semi MIME library 1.14.5 and earlier, and 2 wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0524
CVE-2003-0524 affects Knoppix 3.1 Live CD running Qt. A local attacker can exploit a symlink in the temporary file qt_plugins_3.0rc within the ~/.qt directory to overwrite arbitrary files. Root cause is a symlink vulnerability in the qt_plugins_3.0rc temp file handling. Impact is local confidenti...
CVE-2003-0517
faxrunqd.in in mgetty 1.1.28 and earlier allows local users to overwrite files via a symlink attack on JOB files...
PT-2003-1686 · Mgetty · Mgetty
Name of the Vulnerable Software and Affected Versions: mgetty versions 1.1.28 and earlier Description: The issue allows local users to overwrite files via a symlink attack on JOB files. This is achieved by exploiting the faxrunqd.in component in the affected software. Recommendations: For mgetty...
Qt temporary files race condition in Knoppix 3.1
Qt libaries works with KDE. Knoppix 3.1 comes with KDE3. A default installation on hard disk of this live CD linux distribution with the SSHD daemon running may allow a serious D.o.S. attack and potential root compromise. I've found a race condition in knoppix 3.1 live CD. I've confirmed it on 2...
CVE-2003-0367
znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...
DEBIAN-CVE-2003-0367
znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0367
znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0438
eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0438
CVE-2003-0438 concerns the eldav WebDAV client for Emacs (versions 0.7.2 and earlier). Affected component is the client itself, where a symlink attack on temporary files allows a local user to create or overwrite arbitrary files with the privileges of the user running Emacs/eldav. The vulnerabili...
CVE-2003-0438
eldav WebDAV client for Emacs, version 0.7.2 and earlier, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0367
CVE-2003-0367 concerns the gzip package, where the secondary scripts (gzexe, zdiff, znew) allow local users to overwrite arbitrary files via a symlink attack on temporary files. The issue is attributed to insecure temporary-file handling in these scripts, as noted in related advisories and CVE en...
CVE-2003-0367
znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0367
znew in the gzip package allows local users to overwrite arbitrary files via a symlink attack on temporary files...
[SECURITY] [DSA-308-1] New gzip packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 308-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 6th, 2003 http://www.debian.org/security/faq -...
[SECURITY] [DSA-308-1] New gzip packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 308-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 6th, 2003 http://www.debian.org/security/faq -...
DSA-308 gzip - insecure temporary files
Bulletin has no description...
CVE-2003-0221
The 1 dupatch and 2 setld utilities in HP Tru64 UNIX 5.1B PK1 and earlier allows local users to overwrite files and possibly gain root privileges via a symlink attack...