3561 matches found
CVE-2009-4664
Firewall Builder 3.0.4, 3.0.5, and 3.0.6, when running on Linux, allows local users to gain privileges via a symlink attack on an unspecified temporary file that is created by the iptables script...
Design/Logic Flaw
Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/daemonout, 2 /tmp/puppetdoc.txt, 3 /tmp/puppetdoc.tex, or 4 /tmp/puppetdoc.aux temporary file...
XMail Insecure Temporary File Creation Vulnerability
XMail creates temporary files in an insecure manner. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
XMail < 1.27 Insecure Temporary File Creation
According to its SMTP service banner, the version of XMail running on the remote host creates temporary files insecurely. A local attacker could exploit this to overwrite arbitrary files by using symlink attacks, which could lead to privilege escalation. C Tenable Network Security, Inc...
CVE-2010-0424
The editcmd function in crontab.c in 1 cronie before 1.4.4 and 2 Vixie cron vixie-cron allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory...
CVE-2010-0424
The editcmd function in crontab.c in 1 cronie before 1.4.4 and 2 Vixie cron vixie-cron allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory...
phpMyAdmin Insecure Temporary File and Directory Creation Vulnerabilities
phpMyAdmin creates temporary directories and files in an insecure way. An attacker with local access could potentially exploit this issue to perform symbolic-link attacks, overwriting arbitrary files in the context of the affected application. SPDX-FileCopyrightText: 2010 Greenbone AG Some text...
CentOS 5 : xorg-x11-xfs (CESA-2007:0520)
Updated X.org packages that address a flaw in the way the X.Org X11 xfs font server starts are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The X.Org X11 xfs font server provides a standard...
Ubuntu USN-875-1 (redhat-cluster-suite)
The remote host is missing an update to redhat-cluster-suite announced via advisory USN-875-1. OpenVAS Vulnerability Test $Id: ubuntu8751.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8751.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-875-1...
php -- multiple vulnerabilities
PHP developers reports: This release focuses on improving the stability of the PHP 5.2.x branch with over 60 bug fixes, some of which are security related. All users of PHP 5.2 are encouraged to upgrade to this release. Security Enhancements and Fixes in PHP 5.2.12: Fixed a safemode bypass in...
GNU Coreutils不安全临时文件建立漏洞
Bugraq ID: 37256 CVE ID：CVE-2009-4135 GNU Coreutils是一套GNU操作系统所使用的基本文件、shell和文本操控工具。。 GNU Coreutils "distcheck" Makefile规则设置/tmp目录用于之后的任务执行，由于不安全建立临时目录，允许本地攻击者执行符号链接攻击或在部分条件下执行任意代码。 GNU Coreutils 5.2.1 GNU Coreutils 8.1 用户可参考如下供应商提供的补丁程序：...
DEBIAN-CVE-2009-4193
Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file...
Design/Logic Flaw
Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file...
CVE-2009-4193
Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file...
CVE-2009-4193
Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file...
CVE-2009-4193
Merkaartor 0.14 allows local users to append data to arbitrary files via a symlink attack on the /tmp/merkaartor.log temporary file...
PHP 5.3.1 - MultiPartform-data Denial of Service (Python)
PHP 5.3.1 - MultiPartform-data Denial of Service Python !/usr/bin/python -- coding: utf-8 -- Author: Eren Turkay , 2009/11/20 http://www.pardus.org.tr/eng/ Credits: Bogdan Calin from Acunetix Description: Exploit to cause denial of service on any host that runs PHP via temporary file exhaustion. ...
RedHat Security Advisory RHSA-2009:1530
The remote host is missing updates announced in advisory RHSA-2009:1530. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. nspr provides the Netscape Portable Runtime NSPR. A flaw was found in the way Firefox handles form history. A...
SUSE Linux 'scsi_discovery tool'不安全临时文件建立漏洞
Bugraq ID: 36887 CVE ID：CVE-2009-1297 SUSE Linux是一款基于linux内核的发行版本。 SUSE Linux 'scsidiscovery tool'工具不安全建立临时文件，本地攻击者可以利用漏洞执行符号链接攻击覆盖任意攻击者指定的文件，造成拒绝服务攻击。 S.u.S.E. SLE SDK 10 SP2 S.u.S.E. SLE 11 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 S.u.S.E. openSUSE 10.3 用户可联系供应商获得最新版本：...
Mozilla Firefox 3.5.3 - Local Download Manager Temp File Creation
Mozilla Firefox 3.5.3 - Local Download Manager Temp File Creation / getunique.c AKA Mozilla Firefox 3.5.3 Local Download Manager Exploit Jeremy Brown [email protected] // jbrownsec.blogspot.com // krakowlabs.com 10.28.2009 When downloading files through Firefox and choosing the "Open with"...