3068 matches found
CVE-2001-0071
gpg aka GnuPG 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection...
CVE-2000-0948: Undefined Security Weakness
GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack...
CVE-2000-1127: Undefined Security Weakness
registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the original registrar.log log file and creating a symbolic link to the target file, to which registrar appends log information and sets the permissions to be world readable...
CVE-2000-0691
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.lastrun to the target file...
Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal (3)
Microsoft IIS 4.05.0 and PWS - Extended Unicode Directory Traversal 3 // source: https://www.securityfocus.com/bid/1806/info Microsoft IIS 4.0 and 5.0 are both vulnerable to double dot "../" directory traversal exploitation if extended UNICODE character representations are used in substitution fo...
CVE-2000-0628
The CVE-2000-0628 entry concerns the Apache::ASP 1.93 and earlier, where the source.asp example script in the Apache ASP module allows remote attackers to modify files. The vulnerability pertains to the source.asp file (/site/eg/source.asp in exposed deployments) which comes with the Apache::ASP ...
CVE-2000-0628
The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files...
CVE-2000-0604: Undefined Security Weakness
gkermit in Red Hat Linux is improperly installed with setgid uucp, which allows local users to modify files owned by uucp...
CVE-2000-0579: Undefined Security Weakness
IRIX crontab creates temporary files with predictable file names and with the umask of the user, which could allow local users to modify another user's crontab file as it is being edited...
CVE-2000-0628: Undefined Security Weakness
The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files...
CVE-2000-0691
The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.lastrun to the target file...
CVE-2000-0431
Cobalt RaQ2/RaQ3 systems with FrontPage uploads expose a permissions/ownership misconfiguration that allows bypassing cgiwrap and modifying uploaded files. The issue is documented in CVE-2000-0431 with references in NVD/CVE records and corroborated by OpenVAS/Nessus entries mentioning cgiwrap vul...
CVE-1999-0959
IRIX startmidi program allows local users to modify arbitrary files via a symlink attack...
CVE-2000-0431
Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files...
CVE-1999-0959
Technical details about CVE-1999-0959 are not publicly provided in the supplied documents. No confirmed affected products, versions, or fixes are listed here. Monitor for updates from the cited sources.
CVE-2000-0336
Summary: CVE-2000-0336 affects the OpenLDAP server, where local users can modify arbitrary files via a symlink attack. The root cause described in connected Nessus/Mandrake entries is that OpenLDAP follows symbolic links when creating files, using a default location like /usr/tmp (symlinked to /t...
CVE-1999-0959: Undefined Security Weakness
IRIX startmidi program allows local users to modify arbitrary files via a symlink attack...
CVE-2000-0249: Undefined Security Weakness
The AIX Fast Response Cache Accelerator FRCA allows local users to modify arbitrary files via the configuration capability in the frcactrl program...
CVE-2000-0431: Undefined Security Weakness
Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files...