Steve Kemp

The issue is related to Insecure Temporary File Creation.

The issue allows local users to launch a symlink attack and overwrite arbitrary files due to insecure creation of temporary files.

The issue allows local users to launch a symlink attack and overwrite arbitrary files due to insecure creation of temporary files.

The issue allows local users to write to arbitrary files via a symlink attack on /tmp/s48lose.tmp, specifically through the scheme48-send-definition function in cmuscheme48.el.

The issue allows local users to write to arbitrary files.

The issue allows local users to read arbitrary files due to improper privilege handling. This is achieved via the --lint option.

The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file in /tmp/tramp.#####.

The issue allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic temporary file.

The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/.

The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file. This is related to the lisp/gnus/gnus-fun.el component.

The issue allows remote attackers to gain access to email accounts using an arbitrary password due to improper password validation.

The issue concerns multiple vulnerabilities in the hf package of the Debian GNU/Linux operating system, which can be exploited by a local attacker to compromise the confidentiality, integrity, and availability of protected information. A specific vulnerability exists in the hfkernel, where improper handling of the -k option allows local users to gain privileges via a Trojan horse killall program in a directory in the PATH.

The issue allows local users to read arbitrary files. This is achieved via the `-a` parameter, which is processed while tss is running with privileges.

The issue allows local users to overwrite or print arbitrary files via a symlink attack on the temporaire temporary file, potentially leading to disruption of confidentiality, integrity, and availability of protected information. This can be exploited by a local attacker.

Name of the Vulnerable Software and Affected Versions: Xen versions 3.1 and earlier Description: The issue allows local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm, which is related to xenbaked and xenmon.py. Recommendations: For Xen versions 3.1 and earlier, consider restricting access to the /tmp/xenq-shm file to prevent symlink attacks until a patch is available. As a temporary workaround, consider disabling the xenmon.py script until a patch is available. Avoid using xenbaked and xenmon.py in Xen versions 3.1 and earlier until the issue is resolved.

The issue allows local users to execute arbitrary commands via unknown vectors due to insecure creation of temporary files.

Name of the Vulnerable Software and Affected Versions: GSAMBAD version 0.1.4 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gsambadtmp temporary file. This can lead to disruption of confidentiality, integrity, and availability of protected information. The exploitation of this issue can be carried out by a local attacker. Recommendations: For GSAMBAD version 0.1.4, consider restricting access to the `populate conns` function in src/populate conns.c to minimize the risk of exploitation. As a temporary workaround, avoid using the /tmp/gsambadtmp temporary file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue allows remote attackers to execute arbitrary code. This is due to a buffer overflow.

A buffer overflow issue allows local users to execute arbitrary code. The exact vectors used for exploitation are not specified.

A directory traversal issue allows remote attackers to read arbitrary files by providing crafted sequences, such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed.