[SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 575-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 575-1] New catdoc packages fix temporary file vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 575-1 [email protected] http://www.debian.org/security/ Martin Schulze October 28th, 2004 http://www.debian.org/security/faq -...

DSA-575-1 catdoc - insecure temporary file

Bulletin has no description...

USN-3-1: GhostScript utility script vulnerabilities

Recently, Trustix Secure Linux discovered some vulnerabilities in the gs-common package. The utilities "pv.sh" and "ps2epsi" created temporary files in an insecure way, which allowed a symlink attack to create or overwrite arbitrary files with the privileges of the user invoking the program...

[SA12967] Kerberos V5 "send-pr.sh" Script Insecure Temporary File Creation

TITLE: Kerberos V5 "send-pr.sh" Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA12967 VERIFY ADVISORY: http://secunia.com/advisories/12967/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Kerberos V5 http://secunia.com/product/556/ DESCRIPTION: A...

RHEL 2.1 : mysql (RHSA-2004:597)

Updated mysql packages that fix various security issues, as well as a number of bugs, are now available for Red Hat Enterprise Linux 2.1. MySQL is a multi-user, multi-threaded SQL database server. A number security issues that affect the mysql server have been reported : Oleksandr Byelkin...

RHEL 2.1 : ImageMagick (RHSA-2004:494)

Updated ImageMagick packages that fix various security vulnerabilities are now available. ImageMagickTM is an image display and manipulation tool for the X Window System. A heap overflow flaw was discovered in the ImageMagick image handler. An attacker could create a carefully crafted BMP file in...

Important: Red Hat Security Advisory: mysql security update

Updated mysql packages that fix various security issues, as well as a number of bugs, are now available for Red Hat Enterprise Linux 2.1. MySQL is a multi-user, multi-threaded SQL database server. A number security issues that affect the mysql server have been reported: Oleksandr Byelkin discover...

Ghostscript: Insecure temporary file use in multiple scripts

Background Ghostscript is a software package providing an interpreter for the PostScript language and the PDF file format. It also provides output drivers for various file formats and printers. Description The pj-gs.sh, ps2epsi, pv.sh and sysvlp.sh scripts create temporary files in world-writeabl...

[SECURITY] [DSA 559-1] New net-acct packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 559-1 [email protected] http://www.debian.org/security/ Martin Schulze October 6th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 559-1] New net-acct packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 559-1 [email protected] http://www.debian.org/security/ Martin Schulze October 6th, 2004 http://www.debian.org/security/faq -...

DSA-559-1 net-acct - insecure temporary file

Bulletin has no description...

[Full-Disclosure] [FLSA-2004:1372] Updated sysstat packages fix security vulnerabilities

------------------------------------------------------------------------ Fedora Legacy Update Advisory Synopsis: Updated sysstat packages fix security vulnerabilities Advisory ID: FLSA:1372 Issue date: 2004-10-03 Product: Red Hat Linux Keywords: Bugfix Cross references:...

Netpbm: Multiple temporary file issues

Background Netpbm is a toolkit containing more than 200 separate utilities for manipulation and conversion of graphic images. Description Utilities contained in the Netpbm package prior to the 9.25 version contain defects in temporary file handling. They create temporary files with predictable...

GLSA-200410-02 : Netpbm: Multiple temporary file issues

The remote host is affected by the vulnerability described in GLSA-200410-02 Netpbm: Multiple temporary file issues Utilities contained in the Netpbm package prior to the 9.25 version contain defects in temporary file handling. They create temporary files with predictable names without checking...

Debian DSA-256-1 : mhc - insecure temporary file

A problem has been discovered in adb2mhc from the mhc-utils package. The default temporary directory uses a predictable name. This adds a vulnerability that allows a local attacker to overwrite arbitrary files the users has write permissions for. %NASLMINLEVEL 70300 C Tenable Network Security, In...

Debian DSA-285-1 : lprng - insecure temporary file

Karol Lewandowski discovered that psbanner, a printer filter that creates a PostScript format banner and is part of LPRng, insecurely creates a temporary file for debugging purpose when it is configured as filter. The program does not check whether this file already exists or is linked to another...

Debian DSA-053-1 : nedit - insecure temporary file

The nedit Nirvana editor package as shipped in the non-free section accompanying Debian GNU/Linux 2.2/potato had a bug in its printing code: when printing text it would create a temporary file with the to be printed text and pass that on to the print system. The temporary file was not created...

Debian DSA-477-1 : xine-ui - insecure temporary file creation

Shaun Colley discovered a problem in xine-ui, the xine video player user interface. A script contained in the package to possibly remedy a problem or report a bug does not create temporary files in a secure fashion. This could allow a local attacker to overwrite files with the privileges of the...

Debian DSA-353-1 : sup - insecure temporary file

sup, a package used to maintain collections of files in identical versions across machines, fails to take appropriate security precautions when creating temporary files. A local attacker could exploit this vulnerability to overwrite arbitrary files with the privileges of the user running sup...