3537 matches found
MAGIC Enterprise Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 immutec Security Advisory ID: SA-MAGIC-001 Date: 2001/12/17 Version: 0.2 Magic Enterprise multiple vulnerabilities Affected Software/System: ========================= Vendor : Magic Software http://www.magicsoftware.com Product : Magic Enterprise...
klprfax_filter symlink vulnerability
hi,all ! i'm sorry if this bug has been reported. klprfaxfilter kdeutils-2.2-2,is an application to make a printer that acts as a fax. when using klprfaxfilter,it would creat a temp file,/tmp/klprfax.filter,but the temporary file was not created safely,this vulnerability could be exploited to...
Символьные линки в klprfax_filter из kdeutils (symbolic link)
Создается временный файл /tmp/klprfax.filter без проверки символьных линков...
Netscape vulnerable to arbitrary file overwriting via symlink redirection of temporary file
Overview During installation, Netscape 6.0.1 creates a temporary file with insecure options and a predictable name in a world-writable location. By using a symbolic link attack, an attacker could cause overwrite of arbitrary files. Description The installation script for Netscape 6.0.1 creates a...
Low: Red Hat Security Advisory: : Updated diffutils packages available
Updated diffutils packages are now available, fixing a temporary file handling vulnerability in the sdiff program. When using sdiff in interactive mode, a temporary file is created. The new diffutils packages make sure to create that file in a secure way...
CVE-2001-0465
TurboTax saves passwords in a temporary file when a user imports investment tax information from a financial institution, which could allow local users to obtain sensitive information...
CVE-2001-0481
Mandrake Linux 8.0 is affected by a vulnerability in rpmdrake related to insecure temporary file handling (CVE-2001-0481). The connected Nessus advisory MDKSA-2001:043 confirms a temporary-file vulnerability in rpmdrake and provides an updated rpmdrake package to fix it. The NVD entry mirrors the...
CVE-1999-1541
shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file...
CVE-1999-1459
CVE-1999-1459 affects BMC PATROL Agent prior to 3.2.07. A local symlink attack on a temporary file can enable local users to gain root privileges. The underlying cause is improper handling of a temporary file name via a symlink. The connected documents do not provide a formal remediation or explo...
CVE-1999-1168
CVE-1999-1168 affects the install.iss script of Internet Security Scanner (ISS) for Linux v5.3, via a symlink race in a temporary file that lets a local user change arbitrary file permissions. Root cause: a symlink attack on a temporary file used during installation. Impact: local privilege/permi...
CVE-1999-1439
gcc 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary .i, .s, or .o files...
Dangerous temp file creation during installation of Netscape 6.
During installation of Netscape 6.01a for Solaris 2.7/8 Sparc, I noticed the file /tmp/admin.3842 was created with mode 644. As you already know if this package is installed by root in multiuser mode a malicious user could use this to overwrite system files etc.. Here is the dangerous code: grep...
Символьные линки в Netscape 6 (symbolic link)
Создается временный файл с предсказуемым именем без проверки символьных линков...
CVE-2001-1059
VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license information...
Проблема символьных линков в драйвере Samsung ML-85G (symbolic link)
При создании временного файла используется метка времени...
Samsung ml85p Printer Driver 1.0 - Insecure Temporary File Creation (2)
Samsung ml85p Printer Driver 1.0 - Insecure Temporary File Creation 2 source: https://www.securityfocus.com/bid/3008/info ml85p is a Linux driver for Samsung ML-85G series printers. It may be bundled with distributions of Ghostscript. ml85p does not check for symbolic links when creating image...
Samsung ml85p Printer Driver 1.0 - Insecure Temporary File Creation (2)
source: https://www.securityfocus.com/bid/3008/info ml85p is a Linux driver for Samsung ML-85G series printers. It may be bundled with distributions of Ghostscript. ml85p does not check for symbolic links when creating image output files. These files are created in /tmp with a guessable naming...
Lmail 2.7 - Temporary File Race Condition
// source: https://www.securityfocus.com/bid/2984/info Jon Zeeff's lmail is a local mail delivery agent LDA designed to provide mail-to-pipe and mail-to-file aliasing for smail. A race condition vulnerability exists in lmail. The lmail program makes insecure use of temporary files, making it...
Various shells create temporary files insecurely when using << operator
Overview sh uses /tmp files of a predictable name in creating files for input redirection using the operator. Description When performing the "" redirection, /bin/sh creates a temporary file in /tmp with a name based on the process id, writes subsequent input out to that file, and then closes the...