deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-4946
Published: 2008-11-05
Description: convirt 0.8.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/set_output temporary file, related to the (1) _template_/provision.sh, (2) Linux_CD_Install/provision.sh, (3) Fedora_PV_Install/provision.sh, (4) CentOS_PV_Install/provision.sh, (5) common/provision.sh, (6) example/provision.sh, and (7) Windows_CD_Install/provision.sh scripts in image_store/.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496419; http://dev.gentoo.org/~rbu/security/debiantemp/convirt; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4947
Published: 2008-11-05
Description: dhis-dummy-log-engine in dhis-server 5.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/dhis-dummy-log-engine.log temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496388; http://dev.gentoo.org/~rbu/security/debiantemp/dhis-server; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4948
Published: 2008-11-05
Description: fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddj_fest.tmp temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496399; http://dev.gentoo.org/~rbu/security/debiantemp/digitaldj; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4949
Published: 2008-11-05
Description: dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/cil#####, (b) /tmp/pdo#####, and (c) /tmp/pdn##### temporary files, related to the (1) patcil and (2) patdiff scripts.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496412; http://dev.gentoo.org/~rbu/security/debiantemp/dist; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4950
Published: 2008-11-05
Description: gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file.  NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments within a chroot.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496413; http://dev.gentoo.org/~rbu/security/debiantemp/dpkg-cross; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4951
Published: 2008-11-05
Description: dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/awstats.log, (b) /tmp/spam.log.#####, and (c) /tmp/spam_err.log temporary files, related to the (1) accesslog.php and (2) sa-wrapper scripts.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496362; http://dev.gentoo.org/~rbu/security/debiantemp/dtc-common; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4952
Published: 2008-11-05
Description: emacs-jabber in emacs-jabber 0.7.91 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.log temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496428; http://dev.gentoo.org/~rbu/security/debiantemp/emacs-jabber; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4953
Published: 2008-11-05
Description: firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/.firehol-tmp-#####-*-* and (2) /tmp/firehol.conf temporary files.  NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create[PII_REDACTED]*PID-RANGE symlinks.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496424; http://dev.gentoo.org/~rbu/security/debiantemp/firehol; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4954
Published: 2008-11-05
Description: mead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/debugbuf temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496370; http://dev.gentoo.org/~rbu/security/debiantemp/fml; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4955
Published: 2008-11-05
Description: freevo.real in freevo 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*-#####.pid, (2) /tmp/freevo-gdb, (3) /tmp/freevo-gdb.sh, and (4) /tmp/*.stats temporary files.  NOTE: this issue is only a vulnerability when a verbose debug mode is activated by modifying source code.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496373; http://dev.gentoo.org/~rbu/security/debiantemp/freevo; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4956
Published: 2008-11-05
Description: fwb_install in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent.##### temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496406; http://dev.gentoo.org/~rbu/security/debiantemp/fwbuilder; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4957
Published: 2008-11-05
Description: find_flags in Kitware GCC-XML (gccxml) 0.9.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.cxx temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496391; http://dev.gentoo.org/~rbu/security/debiantemp/gccxml; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4958
Published: 2008-11-05
Description: gdrae in gdrae 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gdrae/palabra temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496378; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=496415; http://dev.gentoo.org/~rbu/security/debiantemp/gdrae
CVE: CVE-2008-4959
Published: 2008-11-05
Description: geo-code in gpsdrive-scripts 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/geo.google, (2) /tmp/geo.yahoo, (3) /tmp/geo.coords, and (4) /tmp/geo#####.coords temporary files.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496436; http://dev.gentoo.org/~rbu/security/debiantemp/gpsdrive-scripts; http://secunia.com/advisories/31694
CVE: CVE-2008-4960
Published: 2008-11-05
Description: impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*-tmp.ps and (2) /tmp/bboxx-* temporary files.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496435; http://dev.gentoo.org/~rbu/security/debiantemp/impose+; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4395
Published: 2008-11-06
Description: Multiple buffer overflows in the ndiswrapper module 1.53 for the Linux kernel 2.6 allow remote attackers to execute arbitrary code by sending packets over a local wireless network that specify long ESSIDs.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119
References: http://bugs.gentoo.org/show_bug.cgi?id=239371; http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-current.git%3Ba=commitdiff%3Bh=49945b423c2f7e33b4c579ca460df6a806ee8f9f; http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00001.html
CVE: CVE-2008-4963
Published: 2008-11-06
Description: Unspecified vulnerability in the VLAN Trunking Protocol (VTP) implementation on Cisco IOS and CatOS, when the VTP operating mode is not transparent, allows remote attackers to cause a denial of service (device reload or hang) via a crafted VTP packet sent to a switch interface configured as a trunk port.
CVSS Score: 7.1 (HIGH)
References: http://osvdb.org/49601; http://secunia.com/advisories/32573; http://securitytracker.com/id?1021143
CVE: CVE-2008-4964
Published: 2008-11-06
Description: filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any-##### temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496379; http://dev.gentoo.org/~rbu/security/debiantemp/konwert-filters; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4965
Published: 2008-11-06
Description: liguidsoap.py in liguidsoap 0.3.8.1+2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/liguidsoap.liq, (2) /tmp/lig.#####.log, and (3) /tmp/emission.ogg temporary files.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496360; http://dev.gentoo.org/~rbu/security/debiantemp/liguidsoap; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4966
Published: 2008-11-06
Description: linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/snap##### and (b) /tmp/nightly##### temporary files, related to the (1) maysnap and (2) maytest scripts.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496376; http://dev.gentoo.org/~rbu/security/debiantemp/linux-patch-openswan; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4967
Published: 2008-11-06
Description: linuxtrade 3.65 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/bwk, (b) /tmp/zzz, and (c) /tmp/ggg temporary files, related to the (1) linuxtrade.bwkvol, (2) linuxtrade.wn, and (3) moneyam.helper scripts.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496372; http://dev.gentoo.org/~rbu/security/debiantemp/linuxtrade; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4968
Published: 2008-11-06
Description: The (1) rccs and (2) STUFF scripts in lmbench 3.0-a7 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/sdiff.##### temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496427; http://dev.gentoo.org/~rbu/security/debiantemp/lmbench; http://secunia.com/advisories/32587
CVE: CVE-2008-4969
Published: 2008-11-06
Description: ltp-network-test 20060918 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/vsftpd.conf, (b) /tmp/udp/2/*, (c) /tmp/tcp/2/*, (d) /tmp/udp/3/*, (e) /tmp/tcp/3/*, (f) /tmp/nfs_fsstress.udp.2.log, (g) /tmp/nfs_fsstress.udp.3.log, (h) /tmp/nfs_fsstress.tcp.2.log, (i) /tmp/nfs_fsstress.tcp.3.log, and (j) /tmp/nfs_fsstress.sardata temporary files, related to the (1) ftp_setup_vsftp_conf and (2) nfs_fsstress.sh scripts.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496411; http://dev.gentoo.org/~rbu/security/debiantemp/ltp-network-te; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4970
Published: 2008-11-06
Description: runiozone in lustre 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/iozone.log temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496371; http://dev.gentoo.org/~rbu/security/debiantemp/lustre-tests; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4971
Published: 2008-11-06
Description: mafft-homologs in mafft 6.240 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/_vf#?????, (2) /tmp/_if#?????, (3) /tmp/_pf#?????, (4) /tmp/_af#?????, (5) /tmp/_rid#?????, (6) /tmp/_res#?????, (7) /tmp/_q#?????, and (8) /tmp/_bf#????? temporary files.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496366; http://dev.gentoo.org/~rbu/security/debiantemp/mafft; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4972
Published: 2008-11-06
Description: mailgo in mgt 2.31 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mailgo##### temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496434; http://dev.gentoo.org/~rbu/security/debiantemp/mgt; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4973
Published: 2008-11-06
Description: i2myspell in myspell 3.1 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/i2my#####.1 and (2) /tmp/i2my#####.2 temporary files.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496392; http://dev.gentoo.org/~rbu/security/debiantemp/myspell-tools; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4974
Published: 2008-11-06
Description: rrdedit in netmrg 0.20 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*.xml and (2) /tmp/*.backup temporary files.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496384; http://dev.gentoo.org/~rbu/security/debiantemp/netmrg; http://secunia.com/advisories/32490
CVE: CVE-2008-4975
Published: 2008-11-06
Description: mkmailpost in newsgate 1.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/mmp##### temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496437; http://dev.gentoo.org/~rbu/security/debiantemp/newsgate; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4976
Published: 2008-11-06
Description: ogle 0.9.2 and ogle-mmx 0.9.2 allow local users to overwrite arbitrary files via a symlink attack on (a) /tmp/ogle_audio.#####, (b) /tmp/ogle_cli.#####, (c) /tmp/ogle_ctrl.#####, (d) /tmp/ogle_gui.#####, (e) /tmp/ogle_mpeg_ps.#####, (f) /tmp/ogle_mpeg_vs.#####, (g) /tmp/ogle_nav.#####, and (h) /tmp/ogle_vout.#####, temporary files, related to the (1) ogle_audio_debug, (2) ogle_cli_debug, (3) ogle_ctrl_debug, (4) ogle_gui_debug, (5) ogle_mpeg_ps_debug, (6) ogle_mpeg_vs_debug, (7) ogle_nav_debug, and (8) ogle_vout_debug scripts.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496420; http://bugs.debian.org/496425; http://dev.gentoo.org/~rbu/security/debiantemp/ogle
CVE: CVE-2008-4977
Published: 2008-11-06
Description: postfix_groups.pl in Postfix 2.5.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/postfix_groups.stdout, (2) /tmp/postfix_groups.stderr, and (3) /tmp/postfix_groups.message temporary files.  NOTE: the vendor disputes this vulnerability, stating "This is not a real issue ... users would have to edit a script under /usr/lib to enable it.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496401; http://dev.gentoo.org/~rbu/security/debiantemp/postfix; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4978
Published: 2008-11-06
Description: radiance 3R9+20080530 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/opt.fmt, (b) /tmp/out#####.fmt, (c) /tmp/tf#####.dat, (d) /tmp/gsf#####, (e) /tmp/sc#####.sh, (f) /tmp/il#####.pic, (g) /tmp/tl#####.pic, (h) /tmp/ds#####.pic, (i) /tmp/tfa#####, and (j) /tmp/sed##### temporary files, related to the (1) optics2rad, (2) pdelta, (3) dayfact, and (4) raddepend scripts.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496433; http://dev.gentoo.org/~rbu/security/debiantemp/radiance; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4979
Published: 2008-11-06
Description: getipacctg in rancid 2.3.2~a8 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/ipacct.#####.prefixes, (2) /tmp/ipacct.#####.sorted, (3) /tmp/ipacct.#####.pl, and (4) /tmp/ipacct.##### temporary files.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496426; http://dev.gentoo.org/~rbu/security/debiantemp/rancid-util; http://secunia.com/advisories/32588
CVE: CVE-2008-4980
Published: 2008-11-06
Description: delqueueask in rccp 0.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/cccp_tmp.txt temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496364; http://dev.gentoo.org/~rbu/security/debiantemp/rccp; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4981
Published: 2008-11-06
Description: perl.robot in realtimebattle 1.0.8 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl.robot.log temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496385; http://dev.gentoo.org/~rbu/security/debiantemp/realtimebattle-common; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4982
Published: 2008-11-06
Description: rkhunter in rkhunter 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rkhunter-debug temporary file. NOTE: this is probably a different vulnerability than CVE-2005-1270.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496375; http://dev.gentoo.org/~rbu/security/debiantemp/rkhunter; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4983
Published: 2008-11-06
Description: scilab-bin 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/SciLink#####1, (b) /tmp/SciLink#####2, (c) /tmp/SciLink#####3, (d) /tmp/*.#####, (e) /tmp/*.#####.res, (f) /tmp/*.#####.err, and (g) /tmp/*.#####.diff temporary files, related to the (1) scilink, (2) scidoc, and (3) scidem scripts.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496414; http://dev.gentoo.org/~rbu/security/debiantemp/scilab-bin; http://secunia.com/advisories/33630
CVE: CVE-2008-4984
Published: 2008-11-06
Description: scratchbox2 1.99.0.24 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/dpkg.#####.tmp, (b) /tmp/missing_deps.#####, and (c) /tmp/sb2-pkg-chk.$tstamp.##### temporary files, related to the (1) dpkg-checkbuilddeps and (2) sb2-check-pkg-mappings scripts.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496409; http://dev.gentoo.org/~rbu/security/debiantemp/scratchbox2; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4985
Published: 2008-11-06
Description: vdrleaktest in Video Disk Recorder (aka vdr-dbg or vdr) 1.6.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/memleaktest.log temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496421; http://dev.gentoo.org/~rbu/security/debiantemp/vdr-dbg; http://uvw.ru/report.lenny.txt
CVE: CVE-2008-4986
Published: 2008-11-06
Description: wims 3.62 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/env#####, (b) /tmp/sed#####, and (c) /tmp/referer-home.log temporary files, related to the (1) coqweb and (2) account.sh scripts.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496387; http://dev.gentoo.org/~rbu/security/debiantemp/wims; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4987
Published: 2008-11-06
Description: xastir 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/ldconfig.tmp, (b) /tmp/ldconf.tmp, and (c) /tmp/ld.so.conf temporary files, related to the (1) get-maptools.sh and (2) get_shapelib.sh scripts.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496383; http://dev.gentoo.org/~rbu/security/debiantemp/xastir; http://secunia.com/advisories/31677
CVE: CVE-2008-4988
Published: 2008-11-06
Description: pscal in xcal 4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal##### temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496393; http://dev.gentoo.org/~rbu/security/debiantemp/xcal; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4991
Published: 2008-11-06
Description: SQL injection vulnerability in LOCKON CO.,LTD. EC-CUBE 2.3.0 and earlier, 1.4.7 and earlier, and 1.5.0-beta2 and earlier; and Community Edition 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://jvn.jp/en/jp/JVN19072922/index.html; http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000075.html; http://www.ipa.go.jp/security/english/vuln/200811_EC-CUBE_en.html
CVE: CVE-2008-4414
Published: 2008-11-07
Description: Unspecified vulnerability in the AdvFS showfile command in HP Tru64 UNIX 5.1B-3 and 5.1B-4 allows local users to gain privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4240&w=2; http://secunia.com/advisories/32621; http://securityreason.com/securityalert/4567
CVE: CVE-2008-4992
Published: 2008-11-07
Description: The SPARC hypervisor in Sun System Firmware 6.6.3 through 6.6.5 and 7.1.3 through 7.1.3.e on UltraSPARC T1, T2, and T2+ processors allows logical domain users to access memory in other logical domains via unknown vectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/32582; http://sunsolve.sun.com/search/document.do?assetkey=1-26-244826-1; http://www.securityfocus.com/bid/32143
CVE: CVE-2008-4993
Published: 2008-11-07
Description: qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496367; http://dev.gentoo.org/~rbu/security/debiantemp/xen-utils-3.2-1; http://www.mandriva.com/security/advisories?name=MDVSA-2009:016
CVE: CVE-2008-4994
Published: 2008-11-07
Description: The (1) ncsarmt and (2) ncsawrap scripts in xmcd 2.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.*pid temporary file.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496416; http://dev.gentoo.org/~rbu/security/debiantemp/xmcd; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4995
Published: 2008-11-07
Description: redirect.pl in bk2site 1.1.9 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/redirect.log temporary file. NOTE: this vulnerability is only limited to debug mode, which is disabled by default.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496430; http://dev.gentoo.org/~rbu/security/debiantemp/bk2site; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4996
Published: 2008-11-07
Description: init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file.  NOTE: the vendor disputes this vulnerability, stating that "init is [used in] a single-user context; there's no possibility that this is exploitable.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59, CWE-59
References: http://bugs.debian.org/496386; http://dev.gentoo.org/~rbu/security/debiantemp/initramfs-tools; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4997
Published: 2008-11-07
Description: dfxml-invoice in datafreedom-perl 0.1.7 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/zenity temporary file.  NOTE: the vendor disputes this vulnerability, stating that the vector is solely "an EXAMPLE used in the manpage.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/496429; http://dev.gentoo.org/~rbu/security/debiantemp/datafreedom-perl; http://www.openwall.com/lists/oss-security/2008/10/30/2
CVE: CVE-2008-4998
Published: 2008-11-07
Description: postinst in twiki 4.1.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/twiki temporary file.  NOTE: the vendor disputes this vulnerability, stating "this bug is invalid.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494648; http://www.openwall.com/lists/oss-security/2008/10/30/2; https://bugs.gentoo.org/show_bug.cgi?id=235770
CVE: CVE-2008-4999
Published: 2008-11-07
Description: Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death").  NOTE: this issue could not be reproduced by a third party, who tested it on 0604DAD. In addition, the original researcher was not able to reliably reproduce the issue.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/4568; http://www.securityfocus.com/archive/1/488782/100/100/threaded; http://www.securityfocus.com/archive/1/488801/100/100/threaded