https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 12:41:42 +0000 https://db.gcve.eu/vuln/fkie_cve-2004-2502 <p>im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file.</p> <p>im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file.</p> https://db.gcve.eu/vuln/fkie_cve-2004-2502 https://db.gcve.eu/vuln/ghsa-62jm-23c8-x8jq <p>im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file.</p> <p>im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file.</p> https://db.gcve.eu/vuln/ghsa-62jm-23c8-x8jq https://db.gcve.eu/vuln/gsd-2004-2502 gsd-2004-2502 https://db.gcve.eu/vuln/gsd-2004-2502 https://db.gcve.eu/vuln/var-200412-0228 <p>im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file. It is reported that im-switch is prone to a local insecure temporary file handling symbolic link vulnerability. The im-switch utility will write to this temporary file before verifying its existence; this would facilitate a symbolic link attack. An attacker may exploit this issue to corrupt arbitrary files. This corruption may potentially result in the elevation of privileges, or in a system wide denial of service. Fedora Core is a Linux system distributed by RedHat. \&#39;\&#39;/usr/bin/im-switch\&#39;\&#39;use \&#34;/tmp/imswitcher$$\&#34; as a temporary file, but because the /tmp/ directory is writable and $$(PID) can be cloud-registered, Therefore, attackers can use symbolic links to destroy important files in the system, which may cause privilege escalation</p> <p>im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file. It is reported that im-switch is prone to a local insecure temporary file handling symbolic link vulnerability. The im-switch utility will write to this temporary file before verifying its existence; this would facilitate a symbolic link attack. An attacker may exploit this issue to corrupt arbitrary files. This corruption may potentially result in the elevation of privileges, or in a system wide denial of service. Fedora Core is a Linux system distributed by RedHat. \&#39;\&#39;/usr/bin/im-switch\&#39;\&#39;use \&#34;/tmp/imswitcher$$\&#34; as a temporary file, but because the /tmp/ directory is writable and $$(PID) can be cloud-registered, Therefore, attackers can use symbolic links to destroy important files in the system, which may cause privilege escalation</p> https://db.gcve.eu/vuln/var-200412-0228