3540 matches found
GLSA-200709-04 : po4a: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200709-04 po4a: Insecure temporary file creation The po4a development team reported a race condition in the gettextize function when creating the file '/tmp/gettextization.failed.po'. Impact : A local attacker could perform a...
GLSA-200709-08 : id3lib: Insecure temporary file creation
The remote host is affected by the vulnerability described in GLSA-200709-08 id3lib: Insecure temporary file creation Nikolaus Schulz discovered that the function RenderV2ToFile in file src/tagfile.cpp creates temporary files in an insecure manner. Impact : A local attacker could exploit this...
Sysstat不安全临时文件建立漏洞
Sysstat是一款Linux下的系统统计工具。 Sysstat不正确处理/tmp/sysstat.run脚本，本地攻击者可以利用漏洞进行拒绝服务攻击。 通过符号链接，可导致破坏系统敏感文件造成拒绝服务攻击。 Sysstat Sysstat 7.1.6 Gentoo Linux 可参考如下安全公告获得补丁信息： https://bugs.gentoo.org/showbug.cgi?id=188808...
irc/bitchx -- multiple vulnerabilities
bannedit reports: Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, related to the pmode variable. Nico Golde reports: There is a security issue in ircii-pana in bitchx' hostname command. The ehostname function...
DEBIAN-CVE-2007-4460
The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...
Design/Logic Flaw
The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...
CVE-2007-4460
The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...
CVE-2007-4460
The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...
CVE-2007-4460
The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...
CVE-2007-3531
The setdefaultspeeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvclock temporary file...
Design/Logic Flaw
The setdefaultspeeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvclock temporary file...
[Full-disclosure] [ GLSA 200707-08 ] NVClock: Insecure file usage
Gentoo Linux Security Advisory GLSA 200707-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
NVClock: Insecure file usage
Background NVClock is an utility for changing NVidia graphic chipsets internal frequency. Description Tavis Ormandy of the Gentoo Linux Security Team discovered that NVClock makes usage of an insecure temporary file in the /tmp directory. Impact A local attacker could create a specially crafted...
XFS rc script race conditions
Insecure usage of chown for temporary file allows to change ownersip of arbitrary file...
security flaw
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file...
security flaw
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change the permissions of arbitrary files via a symlink attack on the /tmp/.font-unix temporary file...
Moderate: Red Hat Security Advisory: xorg-x11-xfs security update
Updated X.org packages that address a flaw in the way the X.Org X11 xfs font server starts are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The X.Org X11 xfs font server provides a standard...
CVE-2007-2839
gfax 0.4.2 and probably other versions creates temporary files insecurely, which allows local users to execute arbitrary commands via unknown vectors...
Design/Logic Flaw
The 1 getRule and 2 getChains functions in server/rules.cpp in fireflierd fireflier-server in FireFlier 1.1.6 allow local users to overwrite arbitrary files via a symlink attack on the /tmp/fireflier.rules temporary file...