1550 matches found
PT-2019-6829 · Red Hat · Openshift
Name of the Vulnerable Software and Affected Versions: OpenShift affected versions not specified Description: The issue is related to the improper creation of files in /tmp by the dump.sh script in the cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin directory of OpenShift...
PT-2019-6830
Name of the Vulnerable Software and Affected Versions Redis versions prior to 2.6 Description The issue is related to an insecure temporary file vulnerability. It is associated with the /tmp/redis-%p.vm file. Recommendations For versions prior to 2.6, update to version 2.6 or later to resolve the...
PT-2019-6831
Name of the Vulnerable Software and Affected Versions Redis version 2.6 Description The issue is related to an insecure temporary file vulnerability. It is associated with the /tmp/redis.ds file in Redis. Recommendations For Redis version 2.6, consider updating to a newer version that addresses...
CVE-2013-0180: Improper Input Validation
Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds...
CVE-2019-3881
Bundler prior to 2.1.0 uses a predictable path in /tmp/, created with insecure permissions as a storage location for gems, if locations under the user's home directory are not available. If Bundler is used in a scenario where the user does not have a writable home directory, an attacker could pla...
CVE-2010-2061
rpcbind 0.2.0 does not properly validate 1 /tmp/portmap.xdr and 2 /tmp/rpcbind.xdr, which can be created by an attacker before the daemon is started...
Design/Logic Flaw
rpcbind 0.2.0 does not properly validate 1 /tmp/portmap.xdr and 2 /tmp/rpcbind.xdr, which can be created by an attacker before the daemon is started...
CVE-2010-2064
rpcbind 0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on 1 /tmp/portmap.xdr and 2 /tmp/rpcbind.xdr...
CVE-2010-2061
rpcbind 0.2.0 does not properly validate 1 /tmp/portmap.xdr and 2 /tmp/rpcbind.xdr, which can be created by an attacker before the daemon is started...
CVE-2010-2061
rpcbind 0.2.0 does not properly validate 1 /tmp/portmap.xdr and 2 /tmp/rpcbind.xdr, which can be created by an attacker before the daemon is started...
PT-2019-6534
Name of the Vulnerable Software and Affected Versions rpcbind version 0.2.0 Description The issue is related to the improper validation of temporary files /tmp/portmap.xdr and /tmp/rpcbind.xdr by rpcbind. An attacker can create these files before the daemon is started, potentially leading to...
CVE-2010-2064: Improper Link Resolution Before File Access
rpcbind 0.2.0 allows local users to write to arbitrary files or gain privileges via a symlink attack on 1 /tmp/portmap.xdr and 2 /tmp/rpcbind.xdr...
CVE-2010-2061: Improper Input Validation
rpcbind 0.2.0 does not properly validate 1 /tmp/portmap.xdr and 2 /tmp/rpcbind.xdr, which can be created by an attacker before the daemon is started...
PT-2019-6765
Name of the Vulnerable Software and Affected Versions Hadoop version 1.0.3 Description The issue arises from Hadoop storing pid files in the shared /tmp directory by default, leading to a symlink vulnerability. Recommendations For Hadoop version 1.0.3, consider changing the default directory for...
CVE-2008-5703
gpsdrive aka gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/.smswatch or b /tmp/gpsdrivepos temporary file, related to 1 examples/gpssmswatch and 2 src/splash.c, different vectors than CVE-2008-4959 and CVE-2008-5380...
CVE-2019-15513
An issue was discovered in OpenWrt libuci aka Library for the Unified Configuration Interface before 15.05.1 as used on Motorola CX2L MWR04L 1.01 and C1 MWR03 1.01 devices. /tmp/.uci/network locking is mishandled after reception of a long SetWanSettings command, leading to a device hang...
keycloak-httpd-client-install security, bug fix, and enhancement update
0.8-1 - Resolves: rhbz1673716 - Rebase k-h-c-i to version 0.8 - The rebase also includes fixes for: - rhbz1533190 - CVE-2017-15111 keycloak-httpd-client-install: unsafe /tmp log file in --log-file option in keycloakcli.py - rhbz1533202 - CVE-2017-15112 keycloak-httpd-client-install: unsafe use of...
CVE-2016-10799
cPanel before 58.0.4 does not set the Pear tmp directory during a PHP installation SEC-137...
PT-2019-7595
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 58.0.4 Description The issue is related to the Pear tmp directory not being set during a PHP installation. Recommendations For versions prior to 58.0.4, update to version 58.0.4 or later to resolve the issue...