CVE-1999-1267

KDE file manager kfm uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a copy command to the server...

CVE-1999-1244

CVE-1999-1244 affects IPFilter versions 3.2.3–3.2.10. The flaw arises from a symlink attack on the saved output file, enabling local users to modify arbitrary files. The impact is described as full confidentiality, integrity, and availability effects in the source data. No remediation or exploit ...

CVE-1999-1221

dxchpwd in Digital Unix OSF/1 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file...

CVE-1999-1267

CVE-1999-1267 concerns the KDE file manager (kfm), which exposes a TCP server for certain file operations. According to the description and linked records, a remote attacker can modify arbitrary files by sending a copy command to this server. The vulnerability is categorized with a NVD base score...

CVE-1999-1125

Oracle Webserver 2.1 and earlier runs setuid root; the configuration file is owned by the oracle account. This allows any local or remote attacker with oracle access to gain privileges or modify arbitrary files by altering the configuration file. No remediation details are provided in the supplie...

CVE-1999-1244: Undefined Security Weakness

IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file...

CVE-1999-1221: Undefined Security Weakness

dxchpwd in Digital Unix OSF/1 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file...

CVE-1999-1480: Undefined Security Weakness

1 acledit and 2 aclput in AIX 4.3 allow local users to create or modify files via a symlink attack...

CVE-1999-1095: Undefined Security Weakness

sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and other programs that use sort...

CVE-1999-1267: Undefined Security Weakness

KDE file manager kfm uses a TCP server for certain file operations, which allows remote attackers to modify arbitrary files by sending a copy command to the server...

CVE-2001-1301

rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file...

Sambar Web Server pagecount exploit code

by default, there is a pagecount script with Sambar Web Server it's situated at http://sambarserver/session/pagecount counter writes it's temporary files at c:sambardirectorytmp if we'll write http://sambarserver/session/pagecount?page=index it will create file in Sambar temp directory with name...

CVE-2001-1172

OmniSecure HTTProtect 1.1.1 allows a superuser without omnish privileges to modify a protected file by creating a symbolic link to that file...

[SNS Advisory No.37] HTTProtect allows attackers to change the protected file using a symlink

----------------------------------------------------------------------- SNS Advisory No.37 HTTProtect allows attackers to change the protected file using a symlink Problem first discovered: Mon, 4 Jun 2001 Published: Wed, 18 Jul 2001...

CVE-2001-0434

The LogDataListToFile ActiveX function used in 1 Knowledge Center and 2 Back web components of Compaq Presario computers allows remote attackers to modify arbitrary files and cause a denial of service...

CVE-2001-0407

Directory traversal vulnerability in MySQL before 3.23.36 allows local users to modify arbitrary files and gain privileges by creating a database whose name starts with .. dot dot...

CVE-2001-0071

gpg aka GnuPG 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection...

CVE-2000-0375: Undefined Security Weakness

The kernel in FreeBSD 3.2 follows symbolic links when it creates core dump files, which allows local attackers to modify arbitrary files...

CVE-2001-0071: Undefined Security Weakness

gpg aka GnuPG 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection...

Security bugs in interactions between IE 5.x, IIS 5.0 and Exchange 2000

Georgi Guninski security advisory 40, 2001 Security bugs in interactions between IE 5.x, IIS 5.0 and Exchange 2000 Systems affected: The bug is in IE 5.x Win2K, probably others but interaction with IIS 5.0 or Exchange web storage is required Risk: High Date: 28 March 2001 Legal Notice: This...