CVE-2001-0138

privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0120

CVE-2001-0120 relates to the shadow-utils package, specifically the useradd component. The vulnerability arises from insecure temporary file handling: useradd creates temporary files in /etc/default with predictable names. If /etc/default is world-writable, an attacker could perform a symbolic-li...

CVE-2001-0125

CVE-2001-0125 affects exmh 2.2 and earlier, where insecure handling of temporary files in /tmp (e.g., exmhErrorMsg) allows local users to overwrite files via a symlink attack. Connected advisories confirm the issue and note that newer versions (e.g., exmh 2.3.1+) fix the vulnerability by switchin...

CVE-2000-0890

periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0141

mgetty 1.1.22 allows local users to overwrite arbitrary files via a symlink attack in some configurations...

CVE-2001-0118

rdist 6.1.5 allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0142

squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations...

CVE-2001-0008

Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures...

CVE-2001-0125

exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file...

CVE-2001-0141

CVE-2001-0141 affects mgetty: multiple sources confirm insecure temporary-file handling that allows local users to overwrite arbitrary files via a symlink attack in certain configurations. Vulnerable until versions before 1.1.24 (Mandrake/MDKSA-2001:009; Debian DSA-011-2 notes patch in 1.1.21-3po...

CVE-2001-0120: Undefined Security Weakness

useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack...

Drummond Miles A1Stats 1.0 - a1disp3.cgi Traversal Arbitrary File Read

Drummond Miles A1Stats 1.0 - a1disp3.cgi Traversal Arbitrary File Read source: https://www.securityfocus.com/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic. Versions of this product fail to properly validate user-supplied input submitted as...

CVE-2001-0059: Undefined Security Weakness

patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0142: Undefined Security Weakness

squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations...

CVE-2001-0117: Undefined Security Weakness

sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack...

CVE-2001-0008: Undefined Security Weakness

Backdoor account in Interbase database server allows remote attackers to overwrite arbitrary files using stored procedures...

Drummond Miles A1Stats 1.0 - 'a1disp3.cgi' Traversal Arbitrary File Read

source: https://www.securityfocus.com/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic. Versions of this product fail to properly validate user-supplied input submitted as querystrings to the A1Stats script. An attacker can compose a long path...

CVE-2001-0169: Undefined Security Weakness

When using the LDPRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib...

CVE-2001-0119: Undefined Security Weakness

gettyps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack...

[SECURITY] [DSA-053-1] nedit symlink attack

Package : nedit Problem type : insecure temporary file Debian-specific: no The nedit Nirvana editor package as shipped in the non-free section accompanying Debian GNU/Linux 2.2/potato had a bug in its printing code: when printing text it would create a temporary file with the to be printed text a...