smbprintsymlink.txt

Product: Samba 'smbprint' script. http://www.samba.org Versions: All versions, but manifesting in different ways. Bug: Symlink bug / tmpfile bug. Impact: Attacker's can write to arbitrary files, and in theory, elevate privileges unlikely Risk: LOW Date: March 19, 2004 Author: Shaun Colley Email:...

CVE-2003-0284

Adobe Acrobat 5 does not properly validate JavaScript in PDF files, which allows remote attackers to write arbitrary files into the Plug-ins folder that spread to other PDF documents, as demonstrated by the W32.Yourde virus...

CVE-2002-0631

Unknown vulnerability in nveventd in NetVisualyzer on SGI IRIX 6.5 through 6.5.16 allows local users to write arbitrary files and gain root privileges...

GnoRPM local /tmp vulnerability

While fixing other problems with the gnorpm package a locally exploitable security hole was found where a normal user could trick root running GnoRPM into writing to arbitary files due to a bug in the gnorpm tmp file handling. A new release of GnoRPM 0.95.1 is now available. This fixes significan...

CVE-1999-0322

The open function in FreeBSD allows local attackers to write to arbitrary files...

CVE-1999-0135

admintool in Solaris allows a local user to write to arbitrary files and gain root access...

PT-1999-1615 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal affected versions not specified Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the packet capture file. Recommendations: At the moment, there is no information about a newer version tha...

CVE-1999-0803

The fwluser script in AIX eNetwork Firewall allows local users to write to arbitrary files via a symlink attack...

SGI IRIX 3456 OpenLinux 1.01.1 - routed traceon

SGI IRIX 3456 OpenLinux 1.01.1 - routed traceon // source: https://www.securityfocus.com/bid/2658/info routed is a daemon used to dynamically update network routing tables. Certain operating systems including IRIX 3.x up to 6.4 inclusive, Caldera OpenLinux 1.0 and 1.1 contain a routed version whi...

PT-1996-1026 · Kodak +1 · Kodak Color Management System +1

Name of the Vulnerable Software and Affected Versions: Kodak Color Management System KCMS on Solaris affected versions not specified Description: The issue allows a local user to write to arbitrary files and gain root access. Recommendations: At the moment, there is no information about a newer...