6 matches found
CVE-2021-46705: Insecure Temporary File
A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2...
CVE-2014-4978
The rsfiltergraph function in librawstudio/rs-filter.c in rawstudio might allow local users to truncate arbitrary files via a symlink attack on 1 /tmp/rs-filter-graph.png or 2 /tmp/rs-filter-graph...
PT-2017-5941
Name of the Vulnerable Software and Affected Versions: rawstudio affected versions not specified Description: The issue concerns the rs filter graph function in librawstudio/rs-filter.c, which might allow local users to truncate arbitrary files via a symlink attack on temporary files...
CVE-2008-0673: Undefined Security Weakness
TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory...
CVE-2007-3921: Improper Link Resolution Before File Access
gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files...
CVE-2007-3337: Undefined Security Weakness
wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA Computer Associates products, allows local users to truncate arbitrary files via a symlink attack on the alarmwkp.def file...