RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch.

| REXOTECdotCOM | |=-----= ADV RX171104 - Cscope :: Race condition on temporary file -----=| | | |=--- - INFORMATION ----------------------------------------------------------------------| VulnDiscovery: 2003/05/21 Release Date : 2004/11/17 Author : Gangstuck / Psirac [email protected]...

Cscope 13.0/15.x - Insecure Temporary File Creation (1)

source: https://www.securityfocus.com/bid/11697/info Cscope creates temporary files in an insecure way. A design error causes the application to fail to verify the presence of a file before writing to it. During execution, the utility reportedly creates temporary files in the system's temporary...

Debian DSA-559-1 : net-acct - insecure temporary file

Stefan Nordhausen has identified a local security hole in net-acct, a user-mode IP accounting daemon. Old and redundant code from some time way back in the past created a temporary file in an insecure fashion. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Debian DSA-583-1 : lvm10 - insecure temporary directory

Trustix developers discovered insecure temporary file creation in a supplemental script in the lvm10 package that didn't check for existing temporary directories, allowing local users to overwrite files via a symlink attack. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

Debian DSA-575-1 : catdoc - insecure temporary file

A temporary file problem has been discovered in xlsview from the catdoc suite, convertors from Word to TeX and plain text, which could lead to local users being able to overwrite arbitrary files via a symlink attack on predictable temporary file names. %NASLMINLEVEL 70300 C Tenable Network...

[ GLSA 200411-13 ] Portage, Gentoolkit: Temporary file vulnerabilities

Gentoo Linux Security Advisory GLSA 200411-13:01 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -...

GLSA-200411-13 : Portage, Gentoolkit: Temporary file vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200411-13 Portage, Gentoolkit: Temporary file vulnerabilities dispatch-conf and qpkg use predictable filenames for temporary files. Impact : A local attacker could create symbolic links in the temporary files directory, pointing t...

GLSA-200411-15 : OpenSSL, Groff: Insecure tempfile handling

The remote host is affected by the vulnerability described in GLSA-200411-15 OpenSSL, Groff: Insecure tempfile handling groffer and the derchop script create temporary files in world-writeable directories with predictable names. Impact : A local attacker could create symbolic links in the tempora...

USN-16-1: perl vulnerabilities

Recently, Trustix Secure Linux discovered some vulnerabilities in the perl package. The utility "instmodsh", the Perl package "PPPort.pm", and several test scripts which are not shipped and only used during build created temporary files in an insecure way, which could allow a symlink attack to...

DSA-583-1 lvm10 - insecure temporary directory

Bulletin has no description...

Mandrake Linux Security Advisory : MySQL (MDKSA-2004:119)

A number of problems have been discovered in the MySQL database server : Jeroen van Wolffelaar discovered an insecure temporary file vulnerability in the mysqlhotcopy script when using the scp method CVE-2004-0457. Oleksandr Byelkin discovered that the 'ALTER TABLE ... RENAME' would check the...

[SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 575-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 577-1 [email protected] http://www.debian.org/security/ Martin Schulze October 29th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 577-1] New postgresql packages fix symlink vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 577-1 [email protected] http://www.debian.org/security/ Martin Schulze October 29th, 2004 http://www.debian.org/security/faq -...

DSA-577-1 postgresql - symlink vulnerability

Bulletin has no description...

[SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 575-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 575-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2004 http://www.debian.org/security/faq -...

DSA-575-1 catdoc - insecure temporary file

Bulletin has no description...

USN-3-1: GhostScript utility script vulnerabilities

Recently, Trustix Secure Linux discovered some vulnerabilities in the gs-common package. The utilities "pv.sh" and "ps2epsi" created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program...

[SA12967] Kerberos V5 "send-pr.sh" Script Insecure Temporary File Creation

TITLE: Kerberos V5 "send-pr.sh" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA12967 VERIFY ADVISORY: http://secunia.com/advisories/12967/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Kerberos V5 http://secunia.com/product/556/ DESCRIPTION: A...