CVE-2000-0628: Undefined Security Weakness

The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files...

CVE-2000-0691

The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.lastrun to the target file...

CVE-2000-0431

Cobalt RaQ2/RaQ3 systems with FrontPage uploads expose a permissions/ownership misconfiguration that allows bypassing cgiwrap and modifying uploaded files. The issue is documented in CVE-2000-0431 with references in NVD/CVE records and corroborated by OpenVAS/Nessus entries mentioning cgiwrap vul...

CVE-2000-0431

Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files...

CVE-1999-0959

IRIX startmidi program allows local users to modify arbitrary files via a symlink attack...

CVE-1999-0959

Technical details about CVE-1999-0959 are not publicly provided in the supplied documents. No confirmed affected products, versions, or fixes are listed here. Monitor for updates from the cited sources.

CVE-2000-0336

Summary: CVE-2000-0336 affects the OpenLDAP server, where local users can modify arbitrary files via a symlink attack. The root cause described in connected Nessus/Mandrake entries is that OpenLDAP follows symbolic links when creating files, using a default location like /usr/tmp (symlinked to /t...

CVE-1999-0959: Undefined Security Weakness

IRIX startmidi program allows local users to modify arbitrary files via a symlink attack...

CVE-2000-0249: Undefined Security Weakness

The AIX Fast Response Cache Accelerator FRCA allows local users to modify arbitrary files via the configuration capability in the frcactrl program...

CVE-2000-0431: Undefined Security Weakness

Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files...

CVE-2000-0336: Undefined Security Weakness

Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack...

CVE-2000-0092: Undefined Security Weakness

The BSD make program allows local users to modify files via a symlink attack when the -j option is being used...

CVE-2000-0628

The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files...

CVE-1999-0864

CVE-1999-0864 involves UnixWare programs that dump core; a local user can modify files via a symlink attack on the ./core.pid file. The description notes a local-privilege/impact vector but provides no remediation or explicit exploit details in the supplied documents. The connected documents do n...

CVE-1999-0836: Undefined Security Weakness

UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack...

CVE-1999-0864: Undefined Security Weakness

UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file...

CVE-2000-0431

Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgiwrap and modify files...

CVE-2000-0249

The AIX Fast Response Cache Accelerator FRCA allows local users to modify arbitrary files via the configuration capability in the frcactrl program...

CVE-1999-0957

MajorCool mjkeycache program allows local users to modify files via a symlink attack...

CVE-1999-0957

The affected software is MajorCool mj_key_cache. The vulnerability arises from a symlink attack that allows local users to modify files. The connected PT-1997-1171 entry notes affected versions are not specified and provides no information about a fix; no explicit mitigation is documented in the ...