CVE-2002-0920

CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while modifying data, which could allow local users and possibly remote attackers to gain privileges by stealing the file before it has been processed...

Symbolic links in python

os.py execvpe method creates temporary file insecurely...

CVE-2002-0920

CGIScript.net csPassword.cgi stores usernames and unencrypted passwords in the password.cgi.tmp temporary file while modifying data, which could allow local users and possibly remote attackers to gain privileges by stealing the file before it has been processed...

DSA-159 python - insecure temporary files

Bulletin has no description...

[SECURITY] [DSA 137-1] New mm packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 137-1 [email protected] http://www.debian.org/security/ Martin Schulze July 30th, 2002 - -------------------------------------------------------------------------- Package : mm Vulnerability...

DSA-137 mm - insecure temporary files

Bulletin has no description...

util-linux package vulnerable to privilege escalation when "ptmptmp" file is not removed properly when using "chfn" utility

Overview The util-linux package contains a race condition vulnerability that can be used to elevate privileges on the system. Description util-linux is shipped with Red Hat Linux and numerous other Linux distributions. It contains a collection of utility programs, such as fstab, mkfs, and chfn. T...

Sun Cobalt RaQ 4.0 - Predictable Temporary Filename Symbolic Link Attack

source: https://www.securityfocus.com/bid/5529/info A vulnerability has been reported in Cobalt RaQ that may allow attackers to obtain elevated privileges. The vulnerability exists in the /usr/lib/authenticate utility which is used by Apache for authentication purposes. Reportedly, the utility...

CVE-2001-1146

AllCommerce with debugging enabled in EnGarde Secure Linux 1.0.1 is affected. The issue stems from creating temporary files with predictable names, enabling local users to perform a symlink attack to modify files. The description in the Connected documents confirms the root cause as predictable t...

CVE-2001-1085

CVE-2001-1085 concerns Lmail 2.7 and earlier. The vulnerability arises from a symlink attack on a temporary file, allowing local users to overwrite arbitrary files. The reports indicate local access is required; impact is partial on confidentiality, integrity, and availability per the provided me...

CVE-2001-1085

Lmail 2.7 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-1999-1565

CVE-1999-1565 affects Man2html 2.1 and earlier. The vulnerability is a local privilege issue where a symlink attack on a temporary file allows local users to overwrite arbitrary files. The impact is described as partial confidentiality, integrity, and availability. The connected documents do not ...

CVE-1999-1332

Technical details about CVE-1999-1332 are not publicly provided in the connected documents you supplied; existing entries mention the vulnerability in gzexe but do not reveal affected versions, impact specifics, or fixes.

MAGIC Enterprise Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 immutec Security Advisory ID: SA-MAGIC-001 Date: 2001/12/17 Version: 0.2 Magic Enterprise multiple vulnerabilities Affected Software/System: ========================= Vendor : Magic Software http://www.magicsoftware.com Product : Magic Enterprise...

Символьные линки в klprfax_filter из kdeutils (symbolic link)

Создается временный файл /tmp/klprfax.filter без проверки символьных линков...

klprfax_filter symlink vulnerability

hi,all ! i'm sorry if this bug has been reported. klprfaxfilter kdeutils-2.2-2,is an application to make a printer that acts as a fax. when using klprfaxfilter,it would creat a temp file,/tmp/klprfax.filter,but the temporary file was not created safely,this vulnerability could be exploited to...

Netscape vulnerable to arbitrary file overwriting via symlink redirection of temporary file

Overview During installation, Netscape 6.0.1 creates a temporary file with insecure options and a predictable name in a world-writable location. By using a symbolic link attack, an attacker could cause overwrite of arbitrary files. Description The installation script for Netscape 6.0.1 creates a...

Low: Red Hat Security Advisory: : Updated diffutils packages available

Updated diffutils packages are now available, fixing a temporary file handling vulnerability in the sdiff program. When using sdiff in interactive mode, a temporary file is created. The new diffutils packages make sure to create that file in a secure way...

CVE-2001-0465

TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow local users to obtain sensitive information...

CVE-2001-0481

Mandrake Linux 8.0 is affected by a vulnerability in rpmdrake related to insecure temporary file handling (CVE-2001-0481). The connected Nessus advisory MDKSA-2001:043 confirms a temporary-file vulnerability in rpmdrake and provides an updated rpmdrake package to fix it. The NVD entry mirrors the...