914 matches found
CVE-2008-0167: Improper Link Resolution Before File Access
The writearrayfile function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow attackers to bypass intended access restrictions or have unspecified other impact in opportunistic circumstances...
CVE-2008-1241: Improper Link Resolution Before File Access
GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab...
CVE-2008-0870: Improper Link Resolution Before File Access
BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an http URI, which allows remote attackers to sniff the session...
CVE-2008-0163: Improper Link Resolution Before File Access
Linux kernel 2.6, when using vservers, allows local users to access resources of other vservers via a symlink attack in /proc...
CVE-2002-2374: Improper Link Resolution Before File Access
Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files."...
CVE-2002-2323: Improper Link Resolution Before File Access
Sun PC NetLink 1.0 through 1.2 does not properly set the access control list ACL for files and directories that use symbolic links and have been restored from backup, which could allow local or remote attackers to bypass intended access restrictions...
CVE-2003-1492: Improper Link Resolution Before File Access
Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . dot at the end...
CVE-2007-5437: Improper Link Resolution Before File Access
The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...
CVE-2007-4224: Improper Link Resolution Before File Access
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property...
CVE-2005-0587: Improper Link Resolution Before File Access
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK link file twice, which overwrites the file that was referenced in the first .LNK file...
CVE-2001-1043: Improper Link Resolution Before File Access
ArGoSoft FTP Server 1.2.2.2 allows remote attackers to read arbitrary files and directories by uploading a .lnk link file that points to the target file...
CVE-2000-1178: Improper Link Resolution Before File Access
Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes...
CVE-2000-0342: Improper Link Resolution Before File Access
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."...