BSDCPIO Symbolic Link Directory Traversal Vulnerability

BSDCPIO is a packaging tool. A directory traversal vulnerability exists in the BSDCPIO symbolic link, which allows an attacker to build malicious files and trick applications into processing them, which can be used to obtain sensitive information...

Tarantella Enterprise 3 Symbolic Link Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4115/info Tarantella Enterprise 3 contains a locally exploitable symbolic link vulnerability during it's installation procedure. This vulnerability can be exploited to elevate privileges. An attacker anticipating the...

Thibault Godouet FCron 1 Symbolic Link Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2835/info FCron is an implementation of the popular UNIX 'cron' utility that runs user-specified programs at periodic scheduled times. fcron is vulnerable to symbolic link attacks. It is possible for an attacker to...

Fedora 19 : mediawiki-1.21.6-1.fc19 (2014-3344)

bug 60771 SECURITY: Disallow uploading SVG files using non-whitelisted namespaces. Also disallow iframe elements. User will get an error including the namespace name if they use a non-whitelisted namespace. - bug 61346 SECURITY: Make token comparison use constant time. It seems like our token...

RHEL 5 : sssd (RHSA-2013:1319)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2013:1319 advisory. SSSD System Security Services Daemon provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides NSS...

PT-2025-26997 · D Link · D-Link Dsl-2730B +1

Name of the Vulnerable Software and Affected Versions: D-Link DSL-2730U version IN 1.02 D-Link DSL-2750U version SEA 1.04 D-Link DSL-2750E version SEA 1.07 Description: A path traversal vulnerability exists in the web management interface of D-Link ADSL routers due to insufficient input validatio...

Mandriva Update for rpm MDVSA-2010:180 (rpm)

Check for the Version of rpm OpenVAS Vulnerability Test Mandriva Update for rpm MDVSA-2010:180 rpm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Fedora 13 : exim-4.72-1.fc13 (2010-9524)

This update fixes the following security flaws: CVE-2010-2023 exim: hard-link following vulnerability in mailbox handling CVE-2010-2024 exim: race condition when MBX locking is enabled Note that Tenable Network Security has extracted the preceding description block directly from the Fedora securi...

CVE-2010-2023

transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the stnlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user's file...

4D WebStar Symbolic Link Vulnerability

The remote server is running 4D WebStar FTP Server. 4D WebStar is reportedly vulnerable to a local symbolic link vulnerability. This issue is due to a design error that causes the application to open files without properly verifying their existence or their absolute location. Successful...

4D WebStar Symbolic Link Vulnerability

4D WebStar is reportedly vulnerable to a local symbolic link vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cscope 13.0/15.x - Insecure Temporary File Creation (1)

source: https://www.securityfocus.com/bid/11697/info Cscope creates temporary files in an insecure way. A design error causes the application to fail to verify the presence of a file before writing to it. During execution, the utility reportedly creates temporary files in the system's temporary...

CVE-2002-1502

Symbolic link vulnerability in xbreaky before 0.5.5 allows local users to overwrite arbitrary files via a symlink from the user's .breakyhighscores file to the target file...

CVE-2002-1502

CVE-2002-1502 affects the xbreaky application prior to 0.5.5. The issue is a symbolic link vulnerability that lets local users overwrite arbitrary files by creating a symlink from the user’s .breakyhighscores file to a target file. The described impact is local privilege or data integrity risk. T...

4D WebSTAR Symlink Privilege Escalation

The remote server is running 4D WebStar FTP Server. The version of 4D WebStar FTP Server on the remote host is reportedly affected by a local symbolic link vulnerability caused by the application opening files without properly verifying their existence or their absolute location. Successful...

IM-Switch - Insecure Temporary File Handling Symbolic Link

IM-Switch - Insecure Temporary File Handling Symbolic Link source: https://www.securityfocus.com/bid/10717/info IM-Switch Insecure Temporary File Handling Symbolic Link VulnerabilityIt is reported that im-switch is prone to a local insecure temporary file handling symbolic link vulnerability. Thi...

IM-Switch - Insecure Temporary File Handling Symbolic Link

source: https://www.securityfocus.com/bid/10717/info IM-Switch Insecure Temporary File Handling Symbolic Link VulnerabilityIt is reported that im-switch is prone to a local insecure temporary file handling symbolic link vulnerability. This issue is due to a design error that allows the applicatio...

CVE-2003-1484

Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service crash by creating a DHTML link that uses the AnchorClick "A" object with a blank href attribute...

CVE-2003-0875

Symbolic link vulnerability in the slpd script slpd.allinit for OpenSLP before 1.0.11 allows local users to overwrite arbitrary files via the route.check temporary file...

D-Link DI-704P - Long URL Denial of Service

source: https://www.securityfocus.com/bid/8355/info D-Link DI-704P has been reported prone to a remote denial of service vulnerability. The issue presents itself when a request of excessive length is sent to the router. This causes the device to behave in an unstable manner. Malicious requests ma...