| CVE-2005-3111 | BAJO2.1 | The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack. | 30/09/2005 |
| CVE-2005-1854 | ALTO7.5 | Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote attackers to execute arbitrary commands on the caching server. | 05/08/2005 |
| CVE-2005-1152 | BAJO2.1 | popauth.c in qpopper 4.0.5 and earlier does not properly set the umask, which may cause qpopper to create files with group or world-writable permissions. | 25/05/2005 |
| CVE-2005-1151 | ALTO7.2 | qpopper 4.0.5 and earlier does not properly drop privileges before processing certain user-supplied files, which allows local users to overwrite or create arbitrary files as root. | 25/05/2005 |
| CVE-2005-0073 | MEDIO4.6 | Buffer overflow in queue.c in a support script for sympa 3.3.3, when running setuid, allows local users to execute arbitrary code. | 02/05/2005 |
| CVE-2005-0159 | MEDIO4.6 | The tpkg-* scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files. | 27/04/2005 |
| CVE-2004-1001 | MEDIO4.6 | Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pam_chauthtok function call is not properly handled. | 01/03/2005 |
| CVE-2005-0625 | BAJO2.1 | reportbug 3.2 includes settings from .reportbugrc in bug reports, which exposes sensitive information such as smtpuser and smtppasswd. | 28/02/2005 |
| CVE-2005-0624 | BAJO2.1 | reportbug before 2.62 creates the .reportbugrc configuration file with world-readable permissions, which allows local users to obtain email smarthost passwords. | 28/02/2005 |
| CVE-2005-0107 | ALTO7.5 | bsmtpd 2.3 and earlier does not properly sanitize e-mail addresses, which allows remote attackers to execute arbitrary commands. | 25/02/2005 |
| CVE-2004-1179 | BAJO2.1 | The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack on temporary directories. | 31/12/2004 |
| CVE-2004-1336 | BAJO2.1 | The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack. | 23/12/2004 |
| CVE-2004-0911 | MEDIO5.0 | telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service (free of an invalid pointer), a different vulnerability than CVE-2001-0554. | 03/11/2004 |
| CVE-2004-0793 | ALTO7.2 | The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file. | 20/10/2004 |
| CVE-2004-0011 | ALTO7.5 | Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code. | 20/01/2004 |
| CVE-2003-1022 | ALTO7.5 | Directory traversal vulnerability in fsp before 2.81.b18 allows remote users to access files outside the FSP root directory. | 20/01/2004 |
| CVE-2004-1000 | BAJO2.1 | lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack. | 10/01/2004 |
| CVE-2003-0214 | MEDIO4.6 | run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files. | 12/05/2003 |
| CVE-2002-1395 | BAJO2.1 | Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz. | 17/01/2003 |
| CVE-2002-0910 | ALTO7.5 | Buffer overflows in netstd 3.07-17 package allows remote DNS servers to execute arbitrary code via a long FQDN reply, as observed in the utilities (1) linux-ftpd, (2) pcnfsd, (3) tftp, (4) traceroute, or (5) from/to. | 04/10/2002 |