9335 matches found
CVE-2011-2923: Improper Link Resolution Before File Access
foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges ...
CVE-2011-2924: Improper Link Resolution Before File Access
foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileg...
CVE-2011-1136
In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file...
CVE-2011-1136
In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file...
DEBIAN-CVE-2010-4817
pithos before 0.3.5 allows overwrite of arbitrary files via symlinks...
Code injection
pithos before 0.3.5 allows overwrite of arbitrary files via symlinks...
CVE-2010-4817: Improper Link Resolution Before File Access
pithos before 0.3.5 allows overwrite of arbitrary files via symlinks...
PT-2019-6595
Name of the Vulnerable Software and Affected Versions pithos versions prior to 0.3.5 Description The issue allows for the overwrite of arbitrary files via symlinks. Recommendations For versions prior to 0.3.5, update to version 0.3.5 or later to resolve the issue...
CVE-2010-3440
babiloo 2.0.9 before 2.0.11 creates temporary files with predictable names when downloading and unpacking dictionary files, allowing a local attacker to overwrite arbitrary files...
CVE-2010-3440
CVE-2010-3440 affects Babiloo, specifically version 2.0.9 prior to 2.0.11. The flaw arises when downloading and unpacking dictionary files: the program creates temporary files with predictable names, enabling a local attacker to overwrite arbitrary files on the host. Impact is local, with potenti...
CVE-2010-3095
mailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files. NOTE: this issue exists because of an incomplete fix for CVE-2008-5313...
CVE-2010-3095
mailscanner before 4.79.11-2.1 might allow local users to overwrite arbitrary files via a symlink attack on certain temporary files. NOTE: this issue exists because of an incomplete fix for CVE-2008-5313...
CVE-2019-1422
An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file creation allowing for a file overwrite, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1420, CVE-2019-1423...
CVE-2019-1422
Technical details for CVE-2019-1422 are not provided in the connected documents. The sources mention Windows elevation-of-privilege context but do not specify affected components, versions, root cause, or fixes. Monitor for updates.
CVE-2019-1422: Improper Link Resolution Before File Access
An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file creation allowing for a file overwrite, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1420, CVE-2019-1423...
CVE-2019-1420: Undefined Security Weakness
An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or creation in a secured location, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1422, CVE-2019-1423...
CVE-2010-3440: Download of Code Without Integrity Check
babiloo 2.0.9 before 2.0.11 creates temporary files with predictable names when downloading and unpacking dictionary files, allowing a local attacker to overwrite arbitrary files...
Code injection
alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts...