15 matches found
SUSE CVE-2005-3340
The tuxpaint-import.sh script in Tux Paint tuxpaint 0.9.14 and earlier creates temporary files insecurely, with unknown impact and attack vectors...
Ubuntu: Security Advisory (USN-243-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-941-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-941-1 : tuxpaint - insecure temporary file
Javier Fernandez-Sanguino Pena from the Debian Security Audit project discovered that a script in tuxpaint, a paint program for young children, creates a temporary file in an insecure fashion. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
Ubuntu 5.10 : tuxpaint vulnerability (USN-243-1)
Javier Fernandez-Sanguino Pena discovered that the tuxpaint-import.sh script created a temporary file in an insecure way. This could allow a symlink attack to create or overwrite arbitrary files with the privileges of the user running tuxpaint. Note that Tenable Network Security has extracted the...
CVE-2005-3340
CVE-2005-3340 affects tuxpaint (tuxpaint) 0.9.14 and earlier. Multiple connected advisories describe insecure temporary file creation in tuxpaint-related scripts (notably tuxpaint-import.sh and related Debian/Ubuntu advisories). This is a local vulnerability that could enable manipulation of temp...
USN-243-1: tuxpaint vulnerability
Javier Fernández-Sanguino Peña discovered that the tuxpaint-import.sh script created a temporary file in an insecure way. This could allow a symlink attack to create or overwrite arbitrary files with the privileges of the user running tuxpaint...
[SECURITY] [DSA 941-1] New tuxpaint packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 941-1 [email protected] http://www.debian.org/security/ Martin Schulze January 16th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 941-1] New tuxpaint packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 941-1 [email protected] http://www.debian.org/security/ Martin Schulze January 16th, 2006 http://www.debian.org/security/faq -...
Tuxpaint paint program for children symbolic links problem
Symbolic links problem on temporary files creation bad guy can overwrite your child's files...
DSA-941-1 tuxpaint - insecure temporary file
Bulletin has no description...
[Full-disclosure] [SECURITY] [DSA 941-1] New tuxpaint packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 941-1 [email protected] http://www.debian.org/security/ Martin Schulze January 16th, 2006 http://www.debian.org/security/faq -...
CVE-2005-3340
The tuxpaint-import.sh script in Tux Paint tuxpaint 0.9.14 and earlier creates temporary files insecurely, with unknown impact and attack vectors...
DEBIAN-CVE-2005-3340
The tuxpaint-import.sh script in Tux Paint tuxpaint 0.9.14 and earlier creates temporary files insecurely, with unknown impact and attack vectors...
KLA10373 Vulnerability in TuxPaint
Insecure files creation was found in TuxPaint. By exploiting this vulnerability malicious users can cause unknown impact via unspecified vectors. Original advisories - Related products Tux-Paint-tuxpaint/ CVE list CVE-2005-3340 high Solution Update to latest version Impacts SB Security bypass...