PT-2012-3662

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 Description The issue allows local users to obtain sensitive information by reading temporary files created during printing, due to the use of world-readable permissions for these files. Recommendations For Opera...

UBUNTU-CVE-2012-0808

as31 2.3.1-4 does not seed the random number generator and generates predictable temporary file names, which makes it easier for local users to create or truncate files via a symlink attack...

PT-2012-1805

Name of the Vulnerable Software and Affected Versions PAR::Packer module versions prior to 1.012 Description The issue concerns the creation of temporary files in a directory with a predictable name by the par mktmpdir function, without verifying the ownership and permissions of this directory...

Untrusted applet causes DoS by filling up disk space

Sun Java Runtime Environment JRE 1.5.06 and earlier, JDK 1.5.06 and earlier, and SDK 1.5.06 and earlier allows remote attackers to cause a denial of service disk consumption by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory...

PT-2008-6127 · Firehol +1 · Firehol +1

Name of the Vulnerable Software and Affected Versions: firehol version 1.256 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files, specifically 1 /tmp/.firehol-tmp--- and 2 /tmp/firehol.conf. The vendor disputes this issue, stating that an...

coolkey file and directory permission flaw

CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory...

DEBIAN-CVE-2006-5298

The muttadvmktemp function in the Mutt mail client 1.5.12 and earlier does not properly verify that temporary files have been created with restricted permissions, which might allow local users to create files with weak permissions via a race condition between the mktemp and safefopen function cal...

DEBIAN-CVE-2006-0512

PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the temporary files, which are not properly created by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh, 4 migrateallnetinfooffline.s...

security flaw

fixproc in Net-snmp 5.x before 5.2.1-r1 creates temporary files insecurely, which allows local users to modify the contents of those files to execute arbitrary commands, or overwrite arbitrary files via a symlink attack...

CVE-2005-2519

slpd in Directory Services in Mac OS X 10.3.9 creates insecure temporary files as root, which allows local users to gain privileges...

Oracle Forms Builder Password in Temp Files

Name Oracle Forms Builder Password in Temp Files Systems Affected Oracle Formsbuilder 9.0.4 Severity Low Risk Category Information disclosure of passwords Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 12 July 2005 V 1.00 Advisory AKSEC2003-006...

PT-2005-2836 · Lutelwall · Lutelwall

Name of the Vulnerable Software and Affected Versions: LutelWall versions 0.97 and earlier Description: The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget. This is a result of a symlink attack vulnerability...

CVE-2005-0787

Wine 20050211 and earlier creates temp files with world readable permissions and predictable file names, which allows local users to obtain sensitive information, such as passwords...

CVE-2005-0787

Wine 20050211 and earlier creates temp files with world readable permissions and predictable file names, which allows local users to obtain sensitive information, such as passwords...

CVE-2005-0787

Wine 20050211 and earlier creates temp files with world readable permissions and predictable file names, which allows local users to obtain sensitive information, such as passwords...

security flaw

Firefox 0.9, Thunderbird 0.6 and other versions before 0.9, and Mozilla 1.7 before 1.7.5 save temporary files with world-readable permissions, which allows local users to read certain web content or attachments that belong to other users, e.g. content that is managed by helper applications such a...

CVE-2005-0787

Wine 20050211 and earlier creates temporary registry dump files in /tmp with world-readable permissions and predictable names, enabling local users to read sensitive data (e.g., passwords). The issue is documented across multiple feeds (NVD, OSV, UBUNTU/CVE pages, OpenVAS listings) with consisten...

DEBIAN-CVE-2003-0885

Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the 1 apple2, 2 xanalogtv, and 3 pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack...

PT-2002-1005 · Debian +1 · Idle +2

Name of the Vulnerable Software and Affected Versions: Python versions prior to 2.2.1 idle package in Debian GNU/Linux affected versions not specified Description: The issue concerns a predictable temporary file name generation in the os. execvpe function from os.py in Python, potentially allowin...

NTFS and PGP interact to expose EFS encrypted data

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 NTFS and PGP interact to expose EFS encrypted data c 2002 Ry Jones, Airgap Networks. Summary: NTFS, a feature of Windows XP, supports an "encrypted" attribute. PGP 7.0.3 Freeware, a product of Network Associates, supports wiping files as they are...