CVE-2008-1570

Race condition in the createlockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by creating the LOCKPATH directory, then modifying it after the symbolic link check occurs. NOTE: this is due to an incomplete fix for CVE-2008-1569...

CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

DEBIAN-CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

DEBIAN-CVE-2008-1570

Race condition in the createlockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by creating the LOCKPATH directory, then modifying it after the symbolic link check occurs. NOTE: this is due to an incomplete fix for CVE-2008-1569...

CVE-2008-1569

CVE-2008-1569 affects policyd-weight (0.1.14 beta-16 and earlier). A local attacker can exploit insecure temporary file handling used when creating a socket, via a symlink attack on the /tmp/.policyd-weight/ directory, potentially deleting arbitrary files or changing ownership to the polw user. R...

CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

CVE-2008-1570

policyd-weight contains a local race condition in create_lockpath that lets unprivileged users modify or delete files by exploiting the LOCKPATH handling. The issue affects the insecure handling of the temporary directory, noted as a result of an incomplete fix for CVE-2008-1569, and is discussed...

CVE-2008-1569

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

CVE-2008-1569: Improper Link Resolution Before File Access

policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket...

CVE-2008-1570: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the createlockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by creating the LOCKPATH directory, then modifying it after the symbolic link check occurs. NOTE: this is due to an incomplete fix for CVE-2008-1569...

policyd-weight symbolic links vulnerabilities

Symbolic links vulnerability on temporary file creation...

[SECURITY] [DSA 1531-1] New policyd-weight packages fix insecure temporary files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1531-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 27, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1531-2] New policyd-weight packages fix insecure temporary files

------------------------------------------------------------------------ Debian Security Advisory DSA-1531-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst March 29, 2008 http://www.debian.org/security/faq -...

Debian DSA-1531-2 : policyd-weight - insecure temporary files

Chris Howells discovered that policyd-weight, a policy daemon for the Postfix mail transport agent, created its socket in an insecure way, which may be exploited to overwrite or remove arbitrary files from the local system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

DSA-1531-2 policyd-weight - insecure temporary files

Bulletin has no description...

postfix-policyd-weight -- working directory symlink vulnerability

postfix-policyd-weight does not check for symlink for its working directory. If the working directory is not already setup by the super root, an unprivileged user can link it to another directories in the system. This results in ownership/permission changes on the target directory...

CVE-2006-1252: Undefined Security Weakness

Eval injection vulnerability in cal.php in Light Weight Calendar LWC 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php...

Light Weight Calendar 1.x - date Remote Code Execution

Light Weight Calendar 1.x - date Remote Code Execution !/usr/bin/perl Light Weight Calendar Exploit by Hessam-x www.hessamx.net / | \ | | / \ \ / | |/ // \ \ / \ Y // \ | | \ | / \ / / / / / / Iran Hackerz Security Team WebSite: www.hackerz.ir Name : Light Weight Calendar version : 1. use...