4886 matches found
CVE-2002-0795
The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files...
WorldClient 5.0.x - Arbitrary File Deletion
source: https://www.securityfocus.com/bid/4687/info WorldClient is a web interface packaged with MDaemon, an email server for Microsoft Windows. An input validation vulnerability exists in WorldClient that allows for an attacker to delete an arbitrary file on the webserver that it resides on. The...
WorldClient 5.0.x - Arbitrary File Deletion
WorldClient 5.0.x - Arbitrary File Deletion source: https://www.securityfocus.com/bid/4687/info WorldClient is a web interface packaged with MDaemon, an email server for Microsoft Windows. An input validation vulnerability exists in WorldClient that allows for an attacker to delete an arbitrary...
CVE-2001-0450
Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to 1 delete arbitrary files via DELETE, or 2 list arbitrary directories via LIST, via a .. dot dot in the file name...
CVE-2000-0293
aaabase in SuSE Linux 6.3, and cron.daily in earlier versions, allow local users to delete arbitrary files by creating files whose names include spaces, which are then incorrectly interpreted by aaabase when it deletes expired files from the /tmp directory...
CVE-1999-0732
The CVE-1999-0732 entry concerns the Debian smtp-refuser package. The issue arises in the package’s logging facility, which can be abused by local users to delete arbitrary files via symbolic links. This is a local-privilege and integrity concern (no confidentiality or availability impact stated ...