Debian xmcd不安全临时文件建立漏洞

BUGTRAQ ID: 32288 CVE ID：CVE-2008-4994 CNCVE ID：CNCVE-20084994 Debian是一款linux发行版本。 Debian 'xmcd'不安全建立临时文件，本地攻击者可以利用漏洞破坏系统文件，造成拒绝服务攻击。 问题是在/tmp目录中不安全建立临时文件，通过符号链接可以用户进程权限覆盖目标系统文件，造成拒绝服务，也可能导致特权提升。 Debian xmcd 2.6 -19.3 升级到最新版本： http://packages.debian.org/lenny/xmcd...

DTSA-177-1 liquidsoap - insecure temporary file handling

Bulletin has no description...

OpenOffice.org <= 2.4.1 senddoc Insecure Temporary File Creation Vulnerability - Linux

OpenOffice.org is prone to an insecure temporary file creation vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OpenOffice senddoc Insecure Temporary File Creation Vulnerability - Windows

OpenOffice is prone to an insecure temporary file creation vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenOffice senddoc Insecure Temporary File Creation Vulnerability (Linux)

The host has OpenOffice installed and is prone to Insecure Temporary File Creation Vulnerability. OpenVAS Vulnerability Test $Id: gbopenofficesenddoctmpfilecreationvulnlin.nasl 7823 2017-11-20 08:54:04Z cfischer $ OpenOffice senddoc Insecure Temporary File Creation Vulnerability Linux Authors:...

Design/Logic Flaw

master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file. NOTE: the vendor disputes this vulnerability, stating 'this package does not have " possibility of attack with the help of symlinks"'...

CVE-2008-5034

master-filter in printfilters-ppd 2.13 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file. NOTE: the vendor disputes this vulnerability, stating 'this package does not have " possibility of attack with the help of symlinks"'...

DEBIAN-CVE-2008-5007

createlazarusexporttgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a 1 /tmp/lazarus.tgz temporary file or a 2 /tmp/lazarus temporary directory...

Directory traversal

createlazarusexporttgz.sh in lazarus 0.9.24 allows local users to overwrite or delete arbitrary files via a symlink attack on a 1 /tmp/lazarus.tgz temporary file or a 2 /tmp/lazarus temporary directory...

PT-2008-6188 · Unknown · Printfilters-Ppd

Name of the Vulnerable Software and Affected Versions: printfilters-ppd version 2.13 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filter.debug temporary file. The vendor disputes this issue, stating that the package does not have the...

CVE-2008-4998

postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid...

DEBIAN-CVE-2008-4996

init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor disputes this vulnerability, stating that "init is used in a single-user context; there's no possibility that this is exploitable...

CVE-2008-4998

postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid...

Arbitrary file deletion

The 1 ncsarmt and 2 ncsawrap scripts in xmcd 2.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.pid temporary file...

Arbitrary file deletion

qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file...

CVE-2008-4995

redirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/redirect.log temporary file. NOTE: this vulnerability is only limited to debug mode, which is disabled by default...

CVE-2008-4997

dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file. NOTE: the vendor disputes this vulnerability, stating that the vector is solely "an EXAMPLE used in the manpage...

CVE-2008-4994

The 1 ncsarmt and 2 ncsawrap scripts in xmcd 2.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.pid temporary file...

CVE-2008-4996

The CVE-2008-4996 entry concerns initramfs-tools 0.92f, where a symlink attack on the /tmp/initramfs.debug file could allow local users to overwrite arbitrary files. The description notes that this vulnerability is disputed by the vendor, which says init is used in a single-user context and that ...

CVE-2008-4998

postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file. NOTE: the vendor disputes this vulnerability, stating "this bug is invalid...