CVE-2007-3921

gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files...

CVE-2007-3919

CVE-2007-3919 affects Xen 3.1 and earlier; the xenbaked and XenMon components allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm. This is a local-privilege issue that can enable data truncation. The MiracleLinux and OSV/OpenVAS/NASL entries corroborate Xen-related...

[SECURITY] [DSA 1395-1] New xen-utils packages fix file truncation

------------------------------------------------------------------------ Debian Security Advisory DSA 1395-1 [email protected] http://www.debian.org/security/ Steve Kemp October 25th, 2007 http://www.debian.org/security/faq -...

CVE-2007-3337

CVE-2007-3337 concerns the Ingres database server (2006 9.0.4 and earlier) used in multiple CA products. A local user can abuse the setuid root binary “wakeup” by creating a symbolic link to the file alarmwkp.def, causing the binary to truncate arbitrary files in the current directory. The issue ...

CVE-2006-0353

unixrandom.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file, which prevents the server from starting, or obtain sensitive seed information that could be used to crack keys...

CVE-2002-1513

The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges...

CVE-2002-1513

The CVE-2002-1513 issue concerns the UCX POP server in HP TCP/IP services for OpenVMS 4.2–5.3. A local user can truncate arbitrary files through the -logfile command line option, because the server runs with SYSPRV and BYPASS privileges, which override file system permissions. NVD assigns a base ...

GLSA-200405-19 : Opera telnet URI handler file creation/truncation vulnerability

The remote host is affected by the vulnerability described in GLSA-200405-19 Opera telnet URI handler file creation/truncation vulnerability The telnet URI handler in Opera does not check for leading '-' characters in the host name. Consequently, a maliciously-crafted telnet:// link may be able t...

Opera telnet URI handler file creation/truncation vulnerability

Background Opera is a multi-platform web browser. Description The telnet URI handler in Opera does not check for leading '-' characters in the host name. Consequently, a maliciously-crafted telnet:// link may be able to pass options to the telnet program itself. One example would be the following...

CVE-2003-0679

Unknown vulnerability in the libcpr library for the Checkpoint/Restart cpr system on SGI IRIX 6.5.21f and earlier allows local users to truncate or overwrite certain files...

CVE-2003-0679

CVE-2003-0679 concerns a vulnerability in the libcpr library used by SGI’s Checkpoint/Restart (cpr) on IRIX 6.5.x. The issue, reported as a local vulnerability, permits users to truncate or overwrite certain files for which they lack permissions. The SGI Security Advisory 20030802-01-P explains t...

CVE-2002-1513

The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges...