CVE-2001-1593

a2ps: insecure temporary file use

The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Gnu

Products

A2ps

CVE-2014-0012

python-jinja2: FileSystemBytecodeCache insecure cache temporary file use, incorrect CVE-2014-1402 fix

FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1402.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Pocoo

Products

Jinja2

CVE-2014-0135

rubygem-kafo: temporary file creation vulnerability when creating /tmp/default_values.yaml

Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for default_values.yaml, which allows local users to obtain passwords and other sensitive information by reading the file.

CVSS 2.0 · 1.9 Low EPSS < 1% KEV · Not listed

Vendors

Redhat Theforeman

Products

Satellite Satellite Capsule Kafo

CVE-2014-1831

rubygem-passenger: insecure use of temporary files

Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Phusion

Products

Passenger

CVE-2014-1832

rubygem-passenger: insecure use of temporary files

Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Phusion

Products

Passenger

CVE-2014-1875

perl-Capture-Tiny: insecure temporary file usage

The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed

Vendors

Cspan

Products

Capture-tiny

CVE-2014-1932

python-imaging: insecure temporary file creation

The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary files, which allow local users to overwrite arbitrary files and obtain sensitive information via a symlink attack on the temporary file.

CVSS 2.0 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Python Pythonware

Products

Pillow Python Imaging Library

CVE-2014-2524

readline: insecure temporary file use in _rl_tropen()

The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Gnu Mageia and 1 more

Products

Fedora Readline Mageia and 1 more

CVE-2014-4199

open-vm-tools: insecure temporary file creation

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.

CVSS 2.0 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Redhat Vmware

Products

Enterprise Linux Tools Vm-support and 1 more

CVE-2014-4200

open-vm-tools: vm-support's diagnostics archive created with world-readable permissions

vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed

Vendors

Redhat Vmware

Products

Enterprise Linux Tools Vm-support and 1 more

CVE-2014-3422

emacs: multiple temporary file issues

lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Gnu Mageia Project

Products

Emacs Mageia

CVE-2014-3423

emacs: multiple temporary file issues

lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.##### temporary file.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Gnu Mageia Project

Products

Emacs Mageia

CVE-2014-3424

emacs: multiple temporary file issues

lisp/net/tramp-sh.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/tramp.##### temporary file.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Gnu Mageia Project

Products

Emacs Mageia

CVE-2014-3486

CFME: SSH Utility insecure tmp file creation leading to code execution as root

The (1) shell_exec function in lib/util/MiqSshUtilV1.rb and (2) temp_cmd_file function in lib/util/MiqSshUtilV2.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 allow local users to execute arbitrary commands via a symlink attack on a temporary file with a predictable name.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Cloudforms 3.0 Management Engine Cloudforms Managementengine

CVE-2014-3563

salt: insecure tmp file creation in seed.py, salt-ssh, and salt-cloud

Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Saltstack

Products

Salt

CVE-2014-8991

python-pip: local DoS vulnerability

pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Oracle Pypa

Products

Solaris Pip

CVE-2013-6493

icedtea-web: insecure temporary file use flaw in LiveConnect implementation

The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2 allows local users to read the messages between a Java applet and a web browser by pre-creating a temporary socket file with a predictable name in /tmp.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Icedtea-web

CVE-2013-4472

xpdf: insecure temporary file

The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Freedesktop

Products

Poppler

CVE-2015-0267

kexec-tools: insecure use of /tmp/*$$* filenames

The Red Hat module-setup.sh script for kexec-tools, as distributed in the kexec-tools before 2.0.7-19 packages in Red Hat Enterprise Linux, allows local users to write to arbitrary files via a symlink attack on a temporary file.

CVSS 2.0 · 3.6 Low EPSS < 1% KEV · Not listed

Vendors

Redhat

Products

Enterprise Linux Kexec-tools

CVE-2015-0383

OpenJDK: insecure hsperfdata temporary file handling (Hotspot, 8050807)

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit R27.8.4 and R28.3.4 allows local users to affect integrity and availability via unknown vectors related to Hotspot.

CVSS 2.0 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 4 more

Products

Ubuntu Linux Debian Linux Fedora and 8 more