Re: [SECURITY] New version of premail fixes /tmp file problem

On Sat, May 30, 1998 at 06:53:48PM +0200, Martin Schulze wrote: We have received a report that premail uses temporary files in /tmp using unsecure methods for opening them. This is fixed in the new 0.45-4 release. We recommend you upgrade your samba package immediately. ^^^^^ This should read...

Re: [SECURITY] New version of premail fixes /tmp file problem

On Sat, May 30, 1998 at 06:53:48PM +0200, Martin Schulze wrote: We have received a report that premail uses temporary files in /tmp using unsecure methods for opening them. This is fixed in the new 0.45-4 release. We recommend you upgrade your samba package immediately. ^^^^^ This should read...

[SECURITY] New version of premail fixes /tmp file problem

We have received a report that premail uses temporary files in /tmp using unsecure methods for opening them. This is fixed in the new 0.45-4 release. We recommend you upgrade your samba package immediately. dpkg -i file.deb will install the referenced file. Debian GNU/Linux 1.3.1 alias bo...

Slackware Linux 3.4 - netconfig Temporary File

Slackware Linux 3.4 - netconfig Temporary File source: https://www.securityfocus.com/bid/81/info netconfig creates the file /tmp/tmpmsg insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/tmpmsg to any file and wait for root to run the program. This will clober...

Slackware Linux 3.4 - makebootdisk Temporary File

Slackware Linux 3.4 - makebootdisk Temporary File source: https://www.securityfocus.com/bid/78/info makebootdisk creates the file /tmp/return insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/return to any file and wait for root to run the program. This will...

Slackware Linux 3.4 - pkgtool Temporary File

Slackware Linux 3.4 - pkgtool Temporary File source: https://www.securityfocus.com/bid/82/info pkgtool creates the file /tmp/reply insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/reply to any file and wait for root to run the program. This will clober the...

Slackware Linux 3.4 - 'netconfig' Temporary File

source: https://www.securityfocus.com/bid/81/info netconfig creates the file /tmp/tmpmsg insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/tmpmsg to any file and wait for root to run the program. This will clober the target file. The file created has...

Slackware Linux 3.4 - 'pkgtool' Temporary File

source: https://www.securityfocus.com/bid/82/info pkgtool creates the file /tmp/reply insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/reply to any file and wait for root to run the program. This will clober the target file. The file created has permissions...

Slackware Linux 3.4 - 'liloconfig-color' Temporary File

source: https://www.securityfocus.com/bid/77/info liloconfig-color creates the file /tmp/reply insecurely and follows symbolic links. An attacker can create a symbolic link from /tmp/reply to any file and wait for root to run the program. This will clober the target file. The file created has...

Slackware Linux 3.4 liloconfig-color temporary file Vulnerability

Exploit for linux platform in category dos / poc $ ln -s /tmp/reply /etc/passwd 0day.today 2017-12-31...

SGI IRIX 6.4 - startmidi Local Privilege Escalation

SGI IRIX 6.4 - startmidi Local Privilege Escalation source: https://www.securityfocus.com/bid/469/info A vulnerability exists in the startmidi program from Silicon Graphics. This utility is included with Irix versions 5.x and 6.x with the Iris Digital Media Execution Environment. startmidi is...

SGI IRIX 6.4 - 'startmidi' Local Privilege Escalation

source: https://www.securityfocus.com/bid/469/info A vulnerability exists in the startmidi program from Silicon Graphics. This utility is included with Irix versions 5.x and 6.x with the Iris Digital Media Execution Environment. startmidi is setuid root, and creates a temporary file called...

Solaris 7.0 - aspppd Insecure Temporary File Creation

Solaris 7.0 - aspppd Insecure Temporary File Creation source: https://www.securityfocus.com/bid/292/info Aspppd is a tool shipped with Solaris for dial up PPP access. This tool creates files in the /tmp directory insecurely in particular /tmp/.asppp.fifo allowing other users to link to these file...