RHEL 5 : cman (RHSA-2009:1341)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1341 advisory. The Cluster Manager cman utility provides services for managing a Linux cluster. Multiple insecure temporary file use flaws were found in...

CentOS Update for hpijs3 CESA-2013:0133 centos5

Check for the Version of hpijs3 OpenVAS Vulnerability Test CentOS Update for hpijs3 CESA-2013:0133 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Scientific Linux Security Update : hplip3 on SL5.x i386/x86_64 (20130108)

It was found that the HP CUPS Common UNIX Printing System fax filter in HPLIP created a temporary file in an insecure way. A local attacker could use this flaw to perform a symbolic link attack, overwriting arbitrary files accessible to a process using the fax filter such as the hp3-sendfax tool...

hplip: insecure temporary file handling

The senddatatostdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing HPLIP 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file...

CVE-2012-3329

IBM Advanced Settings Utility ASU through 3.62 and 3.70 through 9.21 and Bootable Media Creator BoMC through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a 1 temporary file or 2 log file...

Code injection

IBM Advanced Settings Utility ASU through 3.62 and 3.70 through 9.21 and Bootable Media Creator BoMC through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via a symlink attack on a 1 temporary file or 2 log file...

SuSE Update for java-1_6_0-openjdk openSUSE-SU-2012:0828-1 (java-1_6_0-openjdk)

Check for the Version of java-160-openjdk OpenVAS Vulnerability Test $Id: gbsuse201208281.nasl 8245 2017-12-26 06:29:59Z teissa $ SuSE Update for java-160-openjdk openSUSE-SU-2012:0828-1 java-160-openjdk Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

DEBIAN-CVE-2012-5530

The 1 pcmd and 2 pmlogger init scripts in Performance Co-Pilot PCP before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/ temporary file...

Arbitrary file deletion

The 1 pcmd and 2 pmlogger init scripts in Performance Co-Pilot PCP before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/ temporary file...

CVE-2012-5530

The 1 pcmd and 2 pmlogger init scripts in Performance Co-Pilot PCP before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/ temporary file...

CVE-2012-5530

The 1 pcmd and 2 pmlogger init scripts in Performance Co-Pilot PCP before 3.6.10 allow local users to overwrite arbitrary files via a symlink attack on a /var/tmp/ temporary file...

Fedora 17 : pcp-3.6.10-1.fc17 (2012-18686)

Resolve insecure temporary file use flaws in PCP shell scripts Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Low: Red Hat Security Advisory: Red Hat Storage 2.0 security, bug fix, and enhancement update #3

Updated glusterfs packages that fix multiple security issues, several bugs, and contain enhancements are now available for Red Hat Storage 2.0. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System CVSS base score, which give...

Code injection

welcome.py in xdiagnose before 2.5.2ubuntu0.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp...

CVE-2012-5355

welcome.py in xdiagnose before 2.5.2ubuntu0.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp...

CVE-2012-5355

The CVE-2012-5355 issue affects xdiagnose prior to version 2.5.2ubuntu0.1. A symlink attack on a temporary file in /tmp allows local users to overwrite arbitrary files, due to a predictable temporary file name. Impact is limited to local privilege/domains where xdiagnose runs, enabling partial in...

Design/Logic Flaw

scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary 1 standard output or 2 standard error output file...

Fedora 10 : geda-gnetlist-20080929-2.fc10 (2008-10010)

CVE-2008-5148 geda-gnetlist insecure temporary file use Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

CVE-2012-3734

Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users to bypass a document's intended 1 Data Protection level or 2 encryption state by reading the temporary content...

Design/Logic Flaw

Office Viewer in Apple iOS before 6 writes cleartext document data to a temporary file, which might allow local users to bypass a document's intended 1 Data Protection level or 2 encryption state by reading the temporary content...