CVE-2013-6891: Improper Link Resolution Before File Access

lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf...

CVE-2013-0927: Improper Link Resolution Before File Access

Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c readconfig implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGORCFILE environment variable, which allows attackers to bypass intended access restrictions...

CVE-2011-0541: Improper Link Resolution Before File Access

fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories via a symlink attack...

CVE-2010-4173: Improper Link Resolution Before File Access

The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a 1 symlink or 2 hard link attack on the libsdp.log. temporary file...

CVE-2008-7247: Improper Link Resolution Before File Access

sql/sqltable.cc in MySQL 5.0.x through 5.0.88, 5.1.x through 5.1.41, and 6.0 before 6.0.9-alpha, when the data home directory contains a symlink to a different filesystem, allows remote authenticated users to bypass intended access restrictions by calling CREATE TABLE with a 1 DATA DIRECTORY or 2...

CVE-2009-1867: Improper Link Resolution Before File Access

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into 1 selecting a link or 2 completing a dialog, related to a "clickjacking vulnerability."...

CVE-2008-6760: Improper Link Resolution Before File Access

ViArt Shop aka Shopping Cart 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add and save action for a shopping cart in cartsave.php, which reveals the SQL table names in an error message, related to code that mishandles the lack of a userid parameter...

CVE-2008-6759: Improper Link Resolution Before File Access

ViArt Shop aka Shopping Cart 3.5 allows remote attackers to obtain sensitive information via a URL in the POSTDATA parameter to manualssearch.php, which reveals the installation path in an error message...

CVE-2008-5825: Improper Link Resolution Before File Access

The SmartPoster implementation on the Nokia 6131 Near Field Communication NFC phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR aka \r, and . dot characters, which allows remote attackers to trick a user into loadi...

CVE-2008-4971: Improper Link Resolution Before File Access

mafft-homologs in mafft 6.240 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/vf?????, 2 /tmp/if?????, 3 /tmp/pf?????, 4 /tmp/af?????, 5 /tmp/rid?????, 6 /tmp/res?????, 7 /tmp/q?????, and 8 /tmp/bf????? temporary files...

CVE-2008-3946: Improper Link Resolution Before File Access

The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a 1 .plan or 2 .project file...

CVE-2008-3329: Improper Link Resolution Before File Access

Unspecified vulnerability in Links before 2.1, when "only proxies" is enabled, has unknown impact and attack vectors related to providing "URLs to external programs."...

CVE-2008-0167: Improper Link Resolution Before File Access

The writearrayfile function in utils/include.pl in GForge 4.5.14 updates configuration files by truncating them to zero length and then writing new data, which might allow attackers to bypass intended access restrictions or have unspecified other impact in opportunistic circumstances...

CVE-2008-1241: Improper Link Resolution Before File Access

GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab...

CVE-2008-0870: Improper Link Resolution Before File Access

BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the Portal Administration Console to an http URI, which allows remote attackers to sniff the session...

CVE-2008-0163: Improper Link Resolution Before File Access

Linux kernel 2.6, when using vservers, allows local users to access resources of other vservers via a symlink attack in /proc...

CVE-2002-2374: Improper Link Resolution Before File Access

Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files."...

CVE-2002-2323: Improper Link Resolution Before File Access

Sun PC NetLink 1.0 through 1.2 does not properly set the access control list ACL for files and directories that use symbolic links and have been restored from backup, which could allow local or remote attackers to bypass intended access restrictions...

CVE-2003-1492: Improper Link Resolution Before File Access

Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . dot at the end...

CVE-2007-5437: Improper Link Resolution Before File Access

The web console in CA formerly Computer Associates eTrust ITM Threat Manager 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689...