Browse CVEs

MEDIUM 6.9 CVE-2008-4958 gdrae in gdrae 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gdrae/palabra temporary file. Gdrae No fix yet Fix from $1,6002008-11-05 MEDIUM 6.9 CVE-2008-4959 geo-code in gpsdrive-scripts 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/geo.google, (2) /tmp/geo.yaho… Gpsdrive Scripts No fix yet Fix from $1,6002008-11-05 MEDIUM 6.9 CVE-2008-4960 impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*-tmp.ps and (2) /tmp/bboxx-* temporary files. Impose\+ No fix yet Fix from $1,6002008-11-05 MEDIUM 6.9 CVE-2008-4935 asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview#####.pgm temporary file. Aview No fix yet Fix from $1,6002008-11-05 MEDIUM 6.9 CVE-2008-4936 faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file. Mgetty No fix yet Fix from $1,6002008-11-05 MEDIUM 6.9 CVE-2008-4938 aegis 4.24 and aegis-web 4.24 allow local users to overwrite arbitrary files via a symlink attack on (a) /tmp/#####, (b) /tmp/#####.intro, (c) /tmp/a… Aegis No fix yet Fix from $1,6002008-11-05 MEDIUM 6.9 CVE-2008-4939 apertium 3.0.7 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/#####.lex.cc, (b) /tmp/#####.deformat.l, (c) /tmp/###… Apertium No fix yet Fix from $1,6002008-11-05 MEDIUM 6.9 CVE-2008-4940 xmlfile.py in aptoncd 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/aptoncd temporary file. Aptoncd No fix yet Fix from $1,6002008-11-05 MEDIUM 6.9 CVE-2008-4941 arb-common 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/arb_fdnaml_*, (b) /tmp/arb_pids_*, (c) /tm… Arb Common No fix yet Fix from $1,6002008-11-05 MEDIUM 6.9 CVE-2008-4942 audiolink in audiolink 0.05 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/audiolink.db.tmp and (2) /tmp/audiol… Audiolink No fix yet Fix from $1,6002008-11-05 MEDIUM 6.9 CVE-2008-4943 bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/error.txt, (b) /tmp/errores.txt, and pos… Bulmages Servers No fix yet Fix from $1,6002008-11-05 HIGH 9.3 CVE-2008-4694EPSS 10% Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via… Opera Browser after 9.60 Fix from $1,9502008-10-23 HIGH 7.2 CVE-2008-4580 fence_manual, as used in fence 2.02.00-r1 and possibly cman, allows local users to modify arbitrary files via a symlink attack on the fence_manual.fi… Cman Mitigation only Fix from $1,9502008-10-15 HIGH 7.2 CVE-2008-4553 qemu-make-debian-root in qemu 0.9.1-5 on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files and… Qemu No fix yet Fix from $1,9502008-10-15 HIGH 7.2 CVE-2008-4477 alert.d/test.alert in mon 0.99.2 allows local users to overwrite arbitrary files via a symlink attack on the test.alert.log temporary file. Mon Mitigation only Fix from $1,9502008-10-08 HIGH 7.2 CVE-2008-4474 freeradius-dialupadmin in freeradius 2.0.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files in (1) backup_rada… Freeradius Mitigation only Fix from $1,9502008-10-07 HIGH 7.2 CVE-2008-4475 ibackup 2.27 allows local users to overwrite arbitrary files via a symlink attack on temporary files. Ibackup Mitigation only Fix from $1,9502008-10-07 MEDIUM 6.9 CVE-2008-4476 sympa.pl in sympa 5.3.4 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/sympa_aliases.$$ temporary file. NOTE: wwsy… Sympa Mitigation only Fix from $1,6002008-10-07 HIGH 7.2 CVE-2008-4440 The to-upgrade plugin in feta 1.4.16 allows local users to overwrite arbitrary files via a symlink on the (1) /tmp/feta.install.$USER and (2) /tmp/fe… Feta Mitigation only Fix from $1,9502008-10-03 HIGH 7.2 CVE-2008-4406 A certain Debian patch to the run scripts for sabre (aka xsabre) 0.2.4b allows local users to delete or overwrite arbitrary files via a symlink attac… Xsabre Mitigation only Fix from $1,9502008-10-03 HIGH 7.2 CVE-2008-3521 Race condition in the jas_stream_tmpfile function in libjasper/base/jas_stream.c in JasPer 1.900.1 allows local users to cause a denial of service (p… Jasper No fix yet Fix from $1,9502008-10-02 MEDIUM 6.9 CVE-2008-4192 The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack… Cman Mitigation only Fix from $1,6002008-09-29 MEDIUM 6.6 CVE-2008-4191 extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file. Emacspeak Mitigation only Fix from $1,6002008-09-24 HIGH 7.2 CVE-2008-4108 Tools/faqwiz/move-faqwiz.sh (aka the generic FAQ wizard moving tool) in Python 2.4.5 might allow local users to overwrite arbitrary files via a symli… Python Mitigation only Fix from $1,9502008-09-18 MEDIUM 5.8 CVE-2008-4104 Multiple open redirect vulnerabilities in Joomla! 1.5 before 1.5.7 allow remote attackers to redirect users to arbitrary web sites and conduct phishi… Joomla Mitigation only Fix from $1,6002008-09-18 HIGH 7.2 CVE-2008-3927 genmsgidx in Tiger 3.2.2 allows local users to overwrite or delete arbitrary files via a symlink attack on temporary files. Tiger Mitigation only Fix from $1,9502008-09-04 MEDIUM 6.9 CVE-2008-3928 test.sh in Honeyd 1.5c might allow local users to overwrite arbitrary files via a symlink attack on a temporary file. Honeyd Common Mitigation only Fix from $1,6002008-09-04 HIGH 7.2 CVE-2008-3929 gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file. Ampache Mitigation only Fix from $1,9502008-09-04 MEDIUM 6.9 CVE-2008-3930 migrate_aliases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file. Citadel Server Mitigation only Fix from $1,6002008-09-04 MEDIUM 6.9 CVE-2008-3931 javareconf in R 2.7.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files. R Mitigation only Fix from $1,6002008-09-04