CVE-2000-0409

CVE-2000-0409 affects Netscape 4.73 and earlier. When importing a new certificate, Netscape follows symlinks, allowing a local user to overwrite files owned by the user importing the certificate. The available documents state the issue and the affected behavior but do not specify exact vulnerable...

CVE-2000-0387

The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files...

CVE-2000-0387

CVE-2000-0387 affects the FreeBSD ports golddig makelev program, where local users can overwrite arbitrary files. The vulnerability is a local issue with partial integrity impact and a low base score (2.1). The available documents do not provide exploitation details, affected versions beyond the ...

Дырка в Apache::ASP

Один из файлов с примерами ./site/eg/source.asp позволяет перезаписать файл в локальной директории...

CVE-2000-0614

Tnef program in Linux systems allows remote attackers to overwrite arbitrary files via TNEF encoded compressed attachments which specify absolute path names for the decompressed output...

Дырка в IRIX Workshop

Утилита cvconnect позволяет переписать любой файл в системе...

IRIX WorkShop cvconnect(1M) Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Silicon Graphics Inc. Security Advisory Title: IRIX WorkShop cvconnect1M Vulnerability Number: 20000601-01-P Date: June 20, 2000 Silicon Graphics provides this information freely to the SGI user community for its consideration, interpretation, implementation and...

HP Security vulnerability in the man command

Systems Affected: HPUX 10.20 and 11.00 and probably other revs. Short Description: The 'man' command potentially allows attackers to overwrite any arbitrary file on the system via symlink bugs. I notified HP on 5-8-2000 and I've been told that a patch is forthcoming soon. No HP advisory has come...

CVE-2000-0468

man in HP-UX 10.20 and 11 allows local attackers to overwrite files via a symlink attack...

HP-UX 10.2011.0 - man tmp Symlink

HP-UX 10.2011.0 - man tmp Symlink source: https://www.securityfocus.com/bid/1302/info The programmers of the 'man' command on various HPUX releases have made several fatal mistakes that allow an attacker to trivially set a trap that could result in any arbitrary file being overwritten on the syst...

HP-UX 10.20/11.0 - man '/tmp' Symlink

source: https://www.securityfocus.com/bid/1302/info The programmers of the 'man' command on various HPUX releases have made several fatal mistakes that allow an attacker to trivially set a trap that could result in any arbitrary file being overwritten on the system when root runs the 'man' comman...

CVE-2000-0530

The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files...

Проблема символьных линков в Netscape

При создании временого файла с предсказуемым именем для хранения сертификата сервера не проверяется наличие символьного линка. Таким образом может быть перезаписан файл принадлежащий пользователю...

CVE-2000-0387

The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files...

CVE-1999-0676

sdtcmconvert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack...

Linbert.txt

Vulnerability: Any user can overwrite any file in the system. title=Linberto v1.0.2 Q-Bert clone [email protected] Diego Javier Grigna system=Linux, svgalib [email protected] Grampa Elite Overview: Linberto under default installation creates screenshots under the /tmp directory wh...

CVE-1999-0298

The CVE-1999-0298 issue affects ypbind when the -ypset and -ypsetme options are activated in Linux Slackware and SunOS. The underlying vulnerability is a directory traversal attack (".." path) that allows overwriting files. Reported impact includes local and remote attackers able to modify files....

CVE-1999-1177

Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. dot dot in the pathname for an upload operation...

FreeBSD 3.3 - gdc Symlink

FreeBSD 3.3 - gdc Symlink source: https://www.securityfocus.com/bid/835/info It is possible to write debug ouput from gdc to a file /var/tmp/gdbdump. Unfortunately, gdc follows symbolic links which can be created in tmp and will overwrite any file on the system thanks to it being setiud root. Thi...

Computer Software Manufaktur Alibaba 2.0 - Multiple CGI Vulnerabilities

Computer Software Manufaktur Alibaba 2.0 - Multiple CGI Vulnerabilities // source: https://www.securityfocus.com/bid/770/info There are several CGI programs that ship with the Alibaba webserver. Many of these do not do proper input handling, and therefore will allow requests for access to files...