rainbutterfly/cve_corpus huggingface dataset:
CVE-2008-4900 
SQL injection vulnerability in tr.php in YourFreeWorld Classifieds Blaster Script allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T00:00:00.000Z
CVE-2008-4901 
SQL injection vulnerability in admin/admin.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T00:00:00.000Z
CVE-2008-4902 
SQL injection vulnerability in contact_author.php in Article Publisher Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T00:00:00.000Z
CVE-2008-4903 
Cross-site scripting (XSS) vulnerability in the leave comment (feedback) feature in Typo 5.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) comment[author] (Name) and (2) comment[url] (Website) parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T00:00:00.000Z
CVE-2008-4904 
SQL injection vulnerability in the "Manage pages" feature (admin/pages) in Typo 5.1.3 and earlier allows remote authenticated users with "blog publisher" rights to execute arbitrary SQL commands via the search[published_at] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T00:00:00.000Z
CVE-2008-4905 
Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T00:00:00.000Z
CVE-2008-4906 
SQL injection vulnerability in lyrics_song.php in the Lyrics (lyrics_menu) plugin 0.42 for e107 allows remote attackers to execute arbitrary SQL commands via the l_id parameter.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T00:00:00.000Z
CVE-2008-4907 
The message parsing feature in Dovecot 1.1.4 and 1.1.5, when using the FETCH ENVELOPE command in the IMAP client, allows remote attackers to cause a denial of service (persistent crash) via an email with a malformed From address, which triggers an assertion error, aka "invalid message address parsing bug."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T00:00:00.000Z
CVE-2008-4908 
maps/Info/combine.pl in CrossFire crossfire-maps 1.11.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T01:00:00.000Z
CVE-2008-4909 
Cross-site request forgery (CSRF) vulnerability in CompactCMS 1.1 and earlier allows remote attackers to perform unauthorized actions as legitimate users via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T01:00:00.000Z
CVE-2008-4910 
The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument to the showDocument method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T01:00:00.000Z
CVE-2008-4911 
PHP remote file inclusion vulnerability in read.php in Chattaitaliano Istant-Replay allows remote attackers to execute arbitrary PHP code via a URL in the data parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T01:00:00.000Z
CVE-2008-4912 
SQL injection vulnerability in popup_img.php in the fotogalerie module in RS MAXSOFT allows remote attackers to execute arbitrary SQL commands via the fotoID parameter.  NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T01:00:00.000Z
CVE-2008-4913 
Directory traversal vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to delete arbitrary files via a .. (dot dot) in the delete parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T01:00:00.000Z
CVE-2008-4914 
Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service (host crash) via a snapshot with a malformed VMDK delta disk.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-03T19:00:00.000Z
CVE-2008-4915 
The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier, and 1.0.x through 1.0.7; Server 1.0.x through 1.0.7; ESX 2.5.4 through 3.5; and ESXi 3.5, when running 32-bit and 64-bit guest operating systems, does not properly handle the Trap flag, which allows authenticated guest OS users to gain privileges on the guest OS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-10T11:00:00.000Z
CVE-2008-4916 
Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build 126128, and 2.5.1 and earlier 2.x versions; VMware ACE before 1.0.8 build 125922, and 2.5.1 and earlier 2.x versions; VMware Server 1.x before 1.0.8 build 126538 and 2.0.x before 2.0.1 build 156745; VMware Fusion before 2.0.1; VMware ESXi 3.5; and VMware ESX 3.0.2, 3.0.3, and 3.5 allows guest OS users to cause a denial of service (host OS crash) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-06T15:00:00.000Z
CVE-2008-4917 
Unspecified vulnerability in VMware Workstation 5.5.8 and earlier, and 6.0.5 and earlier 6.x versions; VMware Player 1.0.8 and earlier, and 2.0.5 and earlier 2.x versions; VMware Server 1.0.9 and earlier; VMware ESXi 3.5; and VMware ESX 3.0.2 through 3.5 allows guest OS users to have an unknown impact by sending the virtual hardware a request that triggers an arbitrary physical-memory write operation, leading to memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-12-09T00:00:00.000Z
CVE-2008-4918 
Cross-site scripting (XSS) vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is not properly handled in the CFS block page, aka "universal website hijacking."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T20:00:00.000Z
CVE-2008-4919 
Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control (VSPDFViewerX.ocx) 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T20:00:00.000Z
CVE-2008-4921 
board/admin/reguser.php in Chipmunk CMS 1.3 allows remote attackers to bypass authentication and gain administrator privileges via a direct request.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T20:00:00.000Z
CVE-2008-4922 
Buffer overflow in the DjVu ActiveX Control 3.0 for Microsoft Office (DjVu_ActiveX_MSOffice.dll) allows remote attackers to execute arbitrary code via a long (1) ImageURL property, and possibly the (2) Mode, (3) Page, or (4) Zoom properties.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T20:00:00.000Z
CVE-2008-4923 
Multiple insecure method vulnerabilities in MW6 Technologies Aztec ActiveX control (AZTECLib.MW6Aztec, Aztec.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T20:00:00.000Z
CVE-2008-4924 
Multiple insecure method vulnerabilities in MW6 Technologies 1D Barcode ActiveX control (BARCODELib.MW6Barcode, Barcode.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T20:00:00.000Z
CVE-2008-4925 
Multiple insecure method vulnerabilities in MW6 Technologies DataMatrix ActiveX control (DATAMATRIXLib.MW6DataMatrix, DataMatrix.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T20:00:00.000Z
CVE-2008-4926 
Multiple insecure method vulnerabilities in MW6 Technologies PDF417 ActiveX control (MW6PDF417Lib.PDF417, MW6PDF417.dll) 3.0.0.1 allow remote attackers to overwrite arbitrary files via a full pathname argument to the (1) SaveAsBMP and (2) SaveAsWMF methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T20:00:00.000Z
CVE-2008-4927 
Microsoft Windows Media Player (WMP) 9.0 through 11 allows user-assisted attackers to cause a denial of service (application crash) via a malformed (1) MIDI or (2) DAT file, related to "MThd Header Parsing." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T20:00:00.000Z
CVE-2008-4928 
Cross-site scripting (XSS) vulnerability in the redirect function in functions.php in MyBB (aka MyBulletinBoard) 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the url parameter in a removesubscriptions action to moderation.php, related to use of the ajax option to request a JavaScript redirect.  NOTE: this can be leveraged to execute PHP code and bypass cross-site request forgery (CSRF) protection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T20:00:00.000Z
CVE-2008-4929 
MyBB (aka MyBulletinBoard) 1.4.2 uses insufficient randomness to compose filenames of uploaded files used as attachments, which makes it easier for remote attackers to read these files by guessing filenames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T20:00:00.000Z
CVE-2008-4930 
MyBB (aka MyBulletinBoard) 1.4.2 does not properly handle an uploaded file with a nonstandard file type that contains HTML sequences, which allows remote attackers to cause that file to be processed as HTML by Internet Explorer's content inspection, aka "Incomplete protection against MIME-sniffing." NOTE: this could be leveraged for XSS and other attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-04T20:00:00.000Z
CVE-2008-4931 
Cross-site scripting (XSS) vulnerability in the account module in firmCHANNEL Digital Signage 3.24, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the action parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4932 
webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter.  NOTE: this can be leveraged for code execution by writing to a file under the web document root.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4933 
Buffer overflow in the hfsplus_find_cat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service (memory corruption or system crash) via an hfsplus filesystem image with an invalid catalog namelength field, related to the hfsplus_cat_build_key_uni function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4934 
The hfsplus_block_allocate function in fs/hfsplus/bitmap.c in the Linux kernel before 2.6.28-rc1 does not check a certain return value from the read_mapping_page function before calling kmap, which allows attackers to cause a denial of service (system crash) via a crafted hfsplus filesystem image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4935 
asciiview in aview 1.3.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/aview#####.pgm temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4936 
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp.##### temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4937 
senddoc in OpenOffice.org (OOo) 2.4.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/log.obr.##### temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4938 
aegis 4.24 and aegis-web 4.24 allow local users to overwrite arbitrary files via a symlink attack on (a) /tmp/#####, (b) /tmp/#####.intro, (c) /tmp/aegis.#####.ae, (d) /tmp/aegis.#####, (e) /tmp/aegis.#####.1, (f) /tmp/aegis.#####.2, (g) /tmp/aegis.#####.log, and (h) /tmp/aegis.#####.out temporary files, related to the (1) bng_dvlpd.sh, (2) bng_rvwd.sh, (3) awt_dvlp.sh, (4) awt_intgrtn.sh, and (5) aegis.cgi scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4939 
apertium 3.0.7 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/#####.lex.cc, (b) /tmp/#####.deformat.l, (c) /tmp/#####.reformat.l, (d) /tmp/#####docxorig, (e) /tmp/#####docxsalida.zip, (f) /tmp/#####xlsxembed, (g) /tmp/#####xlsxorig, and (h) /tmp/#####xslxsalida.zip temporary files, related to the (1) apertium-gen-deformat, (2) apertium-gen-reformat, and (3) apertium scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4940 
xmlfile.py in aptoncd 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/aptoncd temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4941 
arb-common 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/arb_fdnaml_*, (b) /tmp/arb_pids_*, (c) /tmp/arbdsmz.html, and (d) /tmp/arbdsmz.htm temporary files, related to the (1) arb_fastdnaml and (2) dszmconnect.pl scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4942 
audiolink in audiolink 0.05 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/audiolink.db.tmp and (2) /tmp/audiolink.tb.tmp temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4943 
bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/error.txt, (b) /tmp/errores.txt, and possibly other temporary files, related to the (1) creabulmafact, (2) creabulmacont, and possibly (3) actualizabulmacont, (4) installbulmages-db, and (5) actualizabulmafact scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4944 
writtercontrol in cdcontrol 1.90 allows local users to overwrite arbitrary files via a symlink attack on /tmp/v-recorder*-out temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4945 
amlabel-cdrw in cdrw-taper 0.4 might allow local users to overwrite arbitrary files via a symlink attack involving a /tmp/amlabel-cdrw.##### temporary directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4946 
convirt 0.8.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/set_output temporary file, related to the (1) _template_/provision.sh, (2) Linux_CD_Install/provision.sh, (3) Fedora_PV_Install/provision.sh, (4) CentOS_PV_Install/provision.sh, (5) common/provision.sh, (6) example/provision.sh, and (7) Windows_CD_Install/provision.sh scripts in image_store/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4947 
dhis-dummy-log-engine in dhis-server 5.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/dhis-dummy-log-engine.log temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4948 
fest.pl in digitaldj 0.7.5 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ddj_fest.tmp temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4949 
dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/cil#####, (b) /tmp/pdo#####, and (c) /tmp/pdn##### temporary files, related to the (1) patcil and (2) patdiff scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4950 
gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file.  NOTE: the vendor disputes this vulnerability, stating that "There is no sense in this bug - the script ... is called under specific cross-building environments within a chroot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4951 
dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/awstats.log, (b) /tmp/spam.log.#####, and (c) /tmp/spam_err.log temporary files, related to the (1) accesslog.php and (2) sa-wrapper scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4952 
emacs-jabber in emacs-jabber 0.7.91 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.log temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4953 
firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/.firehol-tmp-#####-*-* and (2) /tmp/firehol.conf temporary files.  NOTE: the vendor disputes this vulnerability, stating that an attack "would require an attacker to create 1073741824*PID-RANGE symlinks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4954 
mead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/debugbuf temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4955 
freevo.real in freevo 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*-#####.pid, (2) /tmp/freevo-gdb, (3) /tmp/freevo-gdb.sh, and (4) /tmp/*.stats temporary files.  NOTE: this issue is only a vulnerability when a verbose debug mode is activated by modifying source code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4956 
fwb_install in fwbuilder 2.1.19 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ssh-agent.##### temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4957 
find_flags in Kitware GCC-XML (gccxml) 0.9.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/*.cxx temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4958 
gdrae in gdrae 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gdrae/palabra temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4959 
geo-code in gpsdrive-scripts 2.10~pre4 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/geo.google, (2) /tmp/geo.yahoo, (3) /tmp/geo.coords, and (4) /tmp/geo#####.coords temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4960 
impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/*-tmp.ps and (2) /tmp/bboxx-* temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-05T14:51:00.000Z
CVE-2008-4963 
Unspecified vulnerability in the VLAN Trunking Protocol (VTP) implementation on Cisco IOS and CatOS, when the VTP operating mode is not transparent, allows remote attackers to cause a denial of service (device reload or hang) via a crafted VTP packet sent to a switch interface configured as a trunk port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-06T11:00:00.000Z
CVE-2008-4964 
filters/any-UTF8 in konwert 1.8 allows local users to delete arbitrary files via a symlink attack on a /tmp/any-##### temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-06T11:00:00.000Z
CVE-2008-4965 
liguidsoap.py in liguidsoap 0.3.8.1+2 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/liguidsoap.liq, (2) /tmp/lig.#####.log, and (3) /tmp/emission.ogg temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-06T11:00:00.000Z
CVE-2008-4966 
linux-patch-openswan 2.4.12 allows local users to overwrite arbitrary files via a symlink attack on (a) /tmp/snap##### and (b) /tmp/nightly##### temporary files, related to the (1) maysnap and (2) maytest scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-06T11:00:00.000Z
CVE-2008-4967 
linuxtrade 3.65 allows local users to overwrite arbitrary files via a symlink attack on the (a) /tmp/bwk, (b) /tmp/zzz, and (c) /tmp/ggg temporary files, related to the (1) linuxtrade.bwkvol, (2) linuxtrade.wn, and (3) moneyam.helper scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-06T11:00:00.000Z
CVE-2008-4968 
The (1) rccs and (2) STUFF scripts in lmbench 3.0-a7 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/sdiff.##### temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-11-06T11:00:00.000Z