CVE-2004-2473: Improper Link Resolution Before File Access

wmFrog weather monitor 0.1.6 and other versions before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-2101: Undefined Security Weakness

langen2kvtml in KDE 3.0 to 3.4.2 creates insecure temporary files in /tmp with predictable names, which allows local users to overwrite arbitrary files...

CVE-2005-2559

doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwrite files via 1 shell metacharacters in the epingcount parameter or 2 restricted shell metacharacters such as "" and "&" in the epinghost parameter, which is not handled by the...

CVE-2004-2319: Undefined Security Weakness

IBM Informix Dynamic Server IDS before 9.40.xC3 allows local users to 1 create or overwrite files via the /001 log file to onedcu or 2 read arbitrary files via a symlink attack on a file in /tmp to onshowaudit...

CVE-2005-2559: Undefined Security Weakness

doping.php in ePing plugin 1.02 and earlier for e107 portal allows remote attackers to execute arbitrary code or overwrite files via 1 shell metacharacters in the epingcount parameter or 2 restricted shell metacharacters such as "" and "&" in the epinghost parameter, which is not handled by the...

GLSA-200508-05 : Heartbeat: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200508-05 Heartbeat: Insecure temporary file creation Eric Romang has discovered that Heartbeat insecurely creates temporary files with predictable filenames. Impact : A local attacker could create symbolic links in the temporary...

MDaemon < 8.1.0 Content Filter Traversal Arbitrary File Overwrite

Binary data 3151.prm...

CVE-2005-2311

SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 request1 or 2 request2 temporary files...

CVE-2005-2300

CVE-2005-2300 (Skype) affects Skype versions up to 1.1.0.20. The flaw enables a local user to overwrite arbitrary files via a symlink attack on the temporary file skype_profile.jpg. The NVD entry lists a local access vector with low base score (2.1) and partial integrity impact; confidentiality a...

Overwrite any file via desname in Oracle Reports

Name Overwrite any file via desname in Oracle Reports Systems Affected Oracle Reports 6.0, 6i, 9i, 10g Severity High Risk Category File overwrite Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 19 July 2005 V 1.00 Advisory AKSEC2003-005 Inital bug...

CVE-2005-2300: Undefined Security Weakness

Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skypeprofile.jpg temporary file...

Skype Temporary File Arbitrary File Overwrite

Binary data 3070.prm...

CVE-2004-2231: Undefined Security Weakness

Zero G Software InstallAnywhere 5.0.6, 5.0.7, and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 persistentstate or 2 env.properties.X temporary files...

CVE-2002-2001

The CVE relates to jmcce 1.3.8 on Mandrake 8.1. It creates log files in /tmp with predictable names, enabling a local user to perform a symlink attack to overwrite arbitrary files. Root-level risk is implied by Mandrake advisory context (jmcce runs with elevated privileges and writes logs to a wo...

CVE-2002-2051: Undefined Security Weakness

The processorweb plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in a log file...

CVE-2005-2230

Electronic Mail Operator elmo 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite arbitrary files...

CVE-2005-2240

xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file...

CVE-2005-2231

High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-2240

xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file...

CVE-2005-2240

xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file...