CVE-2000-0371

Technical details for CVE-2000-0371 are not publicly available in the provided documents. The materials here reiterate that the libmediatool library used by KDE mediatool can allow local symlink-based file creation. Monitor for updates.

CVE-2000-0354

mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory...

CVE-2000-0371: Undefined Security Weakness

The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack...

CVE-2000-0354: Undefined Security Weakness

mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory...

KDE 1.1.2 KApplication configfile - Local Privilege Escalation (2)

source: https://www.securityfocus.com/bid/1291/info The KDE configuration-file management has a bug which could result in root compromise. Due to insecure creation of configuration rc files via KApplication-class, local users can modify ownership of arbitrary files when running setuid root...

Дырка в Carello shopping cart

Можно создавать файл на сервере или переименовывать существующие файлы. Таким образом можно, нпример, получить исходные тексты .asp - файла...

Alert: Carello File Creation flaw

Cerberus Information Security Advisory CISADV000524b http://www.cerberus-infosec.co.uk/advisories.shtml Released : 24th May 2000 Name : Carello Web file overwriting vulnerability Affected Systems : Windows NT running IIS Issue : Remote attackers can write to a server and view source of .asp files...

Qualcomm qpopper 2.53/3.0 / RedHat imap 4.5 -4 / UoW imap 4.5 popd - Lock File Denial of Service

source: https://www.securityfocus.com/bid/1132/info Vulnerabilities exist in a number of pop3 daemon implementations, having to do with their creation of lock files. Affected include Qualcomm's qpopper, and the popd included as part of the imap-4 rpm from RedHat. Lockfiles in both implementation...

CVE-1999-0961

HPUX sysdiag contains a local privilege escalation where an unprivileged user can gain root via a symlink attack during log file creation. The Root Cause is a symlink handling vulnerability in the log file creation path. Affected software is HP-UX sysdiag (no specific version ranges provided in t...

CVE-2000-0194: Undefined Security Weakness

buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters...

Microsoft IIS newdsn.exe Arbitrary File Creation

The CGI /scripts/tools/newdsn.exe is present. This CGI allows any attacker to create files anywhere on your system if your NTFS permissions are not tight enough, and can be used to overwrite DSNs of existing databases. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ;...

CVE-1999-0786: Undefined Security Weakness

The dynamic linker in Solaris allows a local user to create arbitrary files via the LDPROFILE environmental variable and a symlink attack...

Sun Workshop 5.0 - Licensing Manager Symlink

source: https://www.securityfocus.com/bid/998/info A vulnerability exists in the installation of licenses for Sun's WorkShop 5.0 compilers, and other Sun products which use the FlexLM license management system. As part of the installation process, the 'lit' program is run. This program insecurely...

SCO Unixware 7.1/7.1.1 - ARCserver /tmp Symlink

source: https://www.securityfocus.com/bid/988/info A symlink following vulnerability exists in the ARCserve agent, as shipped with SCO Unixware 7. Upon startup, the asagent program will create several files in /tmp. These are created mode 777, and can be removed and replaced by any user on the...

CVE-1999-0061

CVE-1999-0061 concerns the BSD line printer daemon (lpd). Multiple sources confirm a vulnerability in lpd related to file creation and deletion and remote execution. Affected software is BSD-derived lpd implementations; the root cause is not explicitly detailed in the provided documents. Reported...

CVE-1999-0127: Undefined Security Weakness

swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access...

CVE-1999-0061: Undefined Security Weakness

File creation and deletion, and remote execution, in the BSD line printer daemon lpd...

unixware.pis.txt

Greetings, OVERVIEW A vulnerability in "/usr/local/bin/pis" on SCO UnixWare will allow any user to create arbitrary files with group "sys" privileges. A full root compromise is then trivial. BACKGROUND As usual, I've only tested UnixWare 7.1. DETAILS By creating a symlink between /tmp/pisdata and...

CVE-1999-0049

CVE-1999-0049 affects Csetup on IRIX. The documented impact is arbitrary file creation or overwriting via Csetup. The provided sources do not specify root cause details or affected versions; remediation information is not included. Metrics in the NVD entry indicate high impact across confidential...

CVE-1999-0051

CVE-1999-0051 affects IRIX FLEXlm LicenseManager versions 4.0–5.0. The issue allows arbitrary file creation and program execution via the LicenseManager component. No explicit patch/version remediation is provided in the documents; one source (PT-1997-1030) recommends disabling FLEXlm on affected...