CVE-2006-2542

CVE-2006-2542 affects xmcd (Debian xmcd package). The xmcdconfig script creates /var/lib/cddb and /var/lib/xmcd/discog with world-writable permissions, enabling local users to consume disk space and cause a denial of service. Debian/DSA-1086-1 and related advisories document the fix via updated x...

CVE-2008-4994

The CVE-2008-4994 entry concerns the xmcd 2.6 package where the (1) ncsarmt and (2) ncsawrap scripts can be exploited by a local attacker to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.*pid file. This vulnerability arises from insecure temporary file handling in xmcd component...

CVE-2001-1119

CVE-2001-1119 affects xmcd's cda (on SuSE Linux) in versions 3.0.2 and 2.6, where local users can overwrite arbitrary files via a symlink attack on insecure temporary files (in /tmp). The root cause is a symbolic link redirection vulnerability tied to setuid-enabled cda. Impact; local privilege e...