Debian DSA-048-3 : samba

Marcus Meissner discovered that samba was not creating temporary files safely in two places : - when a remote user queried a printer queue samba would create a temporary file in which the queue data would be written. This was being done using a predictable filename, and insecurely, allowing a loc...

Debian DSA-339-1 : semi - insecure temporary file

NOTE: due to a combination of administrative problems, this advisory was erroneously released with the identifier 'DSA-337-1'. DSA-337-1 correctly refers to an earlier advisory regarding gtksee. semi, a MIME library for GNU Emacs, does not take appropriate security precautions when creating...

CVE-2004-0457

The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

Sudo symboli links problem

Unsafe temporary fiels access in sudo -u...

MacOSXLabs RsyncX 2.1 - Insecure Temporary File Creation

MacOSXLabs RsyncX 2.1 - Insecure Temporary File Creation source: https://www.securityfocus.com/bid/11212/info RsyncX is reported to contain an insecure temporary file creation vulnerability. The result of this is that temporary files created by the application may use predictable filenames. A loc...

CVE-2004-1689

sudoedit aka sudo -e in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit...

Moderate: Red Hat Security Advisory: openoffice.org security update

Updated openoffice.org packages that fix a security issue in temporary file handling are now available. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager, formula editor, and drawing program. Secunia...

RHEL 3 : openoffice.org (RHSA-2004:446)

Updated openoffice.org packages that fix a security issue in temporary file handling are now available. OpenOffice.org is an office productivity suite that includes desktop applications such as a word processor, spreadsheet, presentation manager, formula editor, and drawing program. Secunia...

[Full-Disclosure] Secunia Research: StarOffice / OpenOffice Insecure Temporary File Creation

====================================================================== Secunia Research 13/09/2004 - StarOffice / OpenOffice Insecure Temporary File Creation - ====================================================================== Table of Contents Affected...

[SA12476] Net-Acct Insecure Temporary File Creation Vulnerability

TITLE: Net-Acct Insecure Temporary File Creation Vulnerability SECUNIA ADVISORY ID: SA12476 VERIFY ADVISORY: http://secunia.com/advisories/12476/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Net-Acct 0.x http://secunia.com/product/3875/ DESCRIPTION: Stefan...

Ruby symbolic links problem

CGI::Session unsecurely creates temporary file...

GLSA-200409-02 : MySQL: Insecure temporary file creation in mysqlhotcopy

The remote host is affected by the vulnerability described in GLSA-200409-02 MySQL: Insecure temporary file creation in mysqlhotcopy Jeroen van Wolffelaar discovered that the MySQL database hot copy utility mysqlhotcopy.sh, when using the scp method, uses temporary files with predictable names. A...

GLSA-200409-05 : Gallery: Arbitrary command execution

The remote host is affected by the vulnerability described in GLSA-200409-05 Gallery: Arbitrary command execution The upload handling code in Gallery places uploaded files in a temporary directory. After 30 seconds, these files are deleted if they are not valid images. However, since the file...

Gallery: Arbitrary command execution

Background Gallery is a PHP script for maintaining online photo albums. Description The upload handling code in Gallery places uploaded files in a temporary directory. After 30 seconds, these files are deleted if they are not valid images. However, since the file exists for 30 seconds, a carefull...

CVE-2000-0781

ARCServeIT Client Agent 6.62 is affected by a local privilege escalation vulnerability in uagentsetup, where the process does not properly verify the existence or ownership of a temporary file before it is moved to the agent.cfg configuration file. This enables local users to modify the temporary...

CVE-2002-1160

The default configuration of the pamxauth module forwards MIT-Magic-Cookies to new X sessions, which could allow local users to gain root privileges by stealing the cookies from a temporary .xauth file, which is created with the original user's credentials after root uses su...

CVE-2003-0924

netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...

CVE-2000-0781: Undefined Security Weakness

uagentsetup in ARCServeIT Client Agent 6.62 does not properly check for the existence or ownership of a temporary file which is moved to the agent.cfg configuration file, which allows local users to execute arbitrary commands by modifying the temporary file before it is moved...

GLSA-200406-18 : gzip: Insecure creation of temporary files

The remote host is affected by the vulnerability described in GLSA-200406-18 gzip: Insecure creation of temporary files The script gzexe included with gzip contains a bug in the code that handles tempfile creation. If the creation of a temp file fails when using gzexe fails instead of bailing out...

IMWheel 1.0 - Predictable Temporary File Creation

IMWheel 1.0 - Predictable Temporary File Creation source: https://www.securityfocus.com/bid/11008/info IMWheel is reported prone to a predictable temporary file creation vulnerability. This issue is a race condition error and may allow a local attacker to carry out denial of service attacks again...