3587 matches found
CUPS < 1.3.8-4 - Local Privilege Escalation
/ cve-2008-5377.c CUPS http://jon.oberheide.org Usage: $ gcc cve-2008-5377.c -o cve-2008-5377.c $ ./cve-2008-5377 $ id uid=0root gid=1000vm ... Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-5377 pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a...
GLSA-200812-13 : OpenOffice.org: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200812-13 OpenOffice.org: Multiple vulnerabilities Two heap-based buffer overflows when processing WMF files CVE-2008-2237 and EMF files CVE-2008-2238 were discovered. Dmitry E. Oboukhov also reported an insecure temporary file...
GLSA-200812-14 : aview: Insecure temporary file usage
The remote host is affected by the vulnerability described in GLSA-200812-14 aview: Insecure temporary file usage Dmitry E. Oboukhov reported that aview uses the '/tmp/aview$$.pgm' file in an insecure manner when processing files. Impact : A local attacker could perform symlink attacks to overwri...
aview symbolic links vulnerability
Insecure temporary file creation...
[ GLSA 200812-14 ] aview: Insecure temporary file usage
Gentoo Linux Security Advisory GLSA 200812-14 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
[ GLSA 200812-12 ] Honeyd: Insecure temporary file creation
Gentoo Linux Security Advisory GLSA 200812-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
GLSA-200812-12 : Honeyd: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200812-12 Honeyd: Insecure temporary file creation Dmitry E. Oboukhov reported an insecure temporary file usage within the 'test.sh' script. Impact : A local attacker could perform symlink attacks and overwrite arbitrary files wit...
aview: Insecure temporary file usage
Background aview is an ASCII image viewer and animation player. Description Dmitry E. Oboukhov reported that aview uses the "/tmp/aview$$.pgm" file in an insecure manner when processing files. Impact A local attacker could perform symlink attacks to overwrite arbitrary files on the system with th...
chm2pdf Insecure Temporary File Creation or DoS Vulnerability
This host is installed with chm2pdf and is prone to Insecure Temporary File Creation or Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbchm2pdfinsectmpfilecrtnvuln.nasl 4218 2016-10-05 14:20:48Z teissa $ chm2pdf Insecure Temporary File Creation or DoS Vulnerability Authors:...
chm2pdf Insecure Temporary File Creation or DoS Vulnerability
chm2pdf is prone to an insecure temporary file creation or denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
OpenOffice.org: Multiple vulnerabilities
Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description Two heap-based buffer overflows when processing WMF files CVE-2008-2237 and EMF files...
Honeyd: Insecure temporary file creation
Background Honeyd is a small daemon that creates virtual hosts on a network. Description Dmitry E. Oboukhov reported an insecure temporary file usage within the "test.sh" script. Impact A local attacker could perform symlink attacks and overwrite arbitrary files with the privileges of the user...
FreeBSD Ports: mgetty+sendfax
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-5394
/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line aka utline field in a utmp entry...
Design/Logic Flaw
/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line aka utline field in a utmp entry...
CVE-2008-5367
ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file...
CVE-2008-5379
netdisco-mibs-installer 1.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/netdisco-mibs-0.6.tar.gz temporary file, related to the 1 netdisco-mibs-install and 2 netdisco-mibs-download scripts...
DEBIAN-CVE-2008-5376
editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.tag.tmp temporary file...