Gentoo Linux 1.4 rc2

The set_default_speeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvclock temporary file.

Published: 2007-07-25T17:00:00.000Z
Updated: 2024-08-07T14:21:36.106Z

The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to modify saved games files to execute arbitrary code via buffer overflows and overwrite arbitrary files via symlink attacks.

Published: 2006-03-25T00:00:00.000Z
Updated: 2024-08-07T17:12:21.262Z

Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers.

Published: 2005-01-19T05:00:00.000Z
Updated: 2024-08-07T20:57:40.834Z

Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles.

Published: 2005-05-10T04:00:00.000Z
Updated: 2025-01-16T18:09:40.758Z

Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts.

Published: 2005-02-13T05:00:00.000Z
Updated: 2024-08-08T00:53:23.647Z