CVE-2001-1066

The CVE-2001-1066 issue affects the Netscape 6.0.1 installation script on Solaris (and related versions) where the installer creates a temporary, predictably named file in a world-writable /tmp directory without proper existence/ownership checks. This enables a local attacker to perform a symlink...

NOD32 < 2.51.26 Antivirus Local File Overwrite

Binary data 3503.prm...

Mandrake Linux Security Advisory : samba (MDKSA-2001:040-1)

A vulnerability found by Marcus Meissner exists in Samba where it was not creating temporary files safely which could allow local users to overwrite files that they may not have access to. This happens when a remote user queried a printer queue and samba would create a temporary file in which the...

Epic Games Unreal Tournament Engine 3 - UMOD Manifest.INI Arbitrary File Overwrite

Epic Games Unreal Tournament Engine 3 - UMOD Manifest.INI Arbitrary File Overwrite // source: https://www.securityfocus.com/bid/10196/info Reportedly the Unreal Tournament Engine is affected by a local file overwrite vulnerability due to the UMOD manifest.ini file. This issue is due to an input...

CVE-2004-0283

CVE-2004-0283 affects Mailmgr 1.2.3, where local users can overwrite arbitrary files via a symlink attack against /tmp/mailmgr.unsort, /tmp/mailmgr.tmp, or /tmp/mailmgr.sort. The root cause is improper handling of temporary files that allows a local attacker to leverage symlinks to redirect file ...

CVE-2004-0279

AIM Sniff (aimSniff.pl) 0.9b is affected. A local user can overwrite arbitrary files via a symlink attack on /tmp/AS.log, indicating a local file overwrite vulnerability in this tool. The provided connected documents confirm the affected component and the root cause (symlink leading to /tmp/AS.lo...

Moderate: Red Hat Security Advisory: sysstat security update

Updated sysstat packages that fix various bugs and security issues are now available. Sysstat is a tool for gathering system statistics. Isag is a utility for graphically displaying these statistics. A bug was found in the Red Hat sysstat package post and trigger scripts, which used insecure...

CVE-2003-0924

netpbm 9.25 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...

CVE-2003-0885

Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the 1 apple2, 2 xanalogtv, and 3 pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack...

CVE-2003-1294

Xscreensaver before 4.15 creates temporary files insecurely in 1 driver/passwd-kerberos.c, 2 driver/xscreensaver-getimage-video, 3 driver/xscreensaver.kss.in, and the 4 vidwhacker and 5 webcollage screensavers, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2003-0872

Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary files...

CVE-2003-0844

modgzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode without the Apache log, allows local users to overwrite arbitrary files via 1 a symlink attack on predictable temporary filenames on Unix systems, or 2 an NTFS hard link on Windows systems when the...

CVE-2003-0656

CVE-2003-0656 affects eroaster; a local user can overwrite arbitrary files by exploiting a symlink attack on the temporary lockfile used during operation. Public advisories (Debian DSA-366-1 and related entries) describe the issue as insecure temporary file creation. The vulnerability is fixed in...

CVE-2003-0455

The imagemagick libmagick library 5.5 and earlier creates temporary files insecurely, which allows local users to create or overwrite arbitrary files...

CVE-2002-1502

Symbolic link vulnerability in xbreaky before 0.5.5 allows local users to overwrite arbitrary files via a symlink from the user's .breakyhighscores file to the target file...

CVE-2002-1508

slapd in OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests...

CVE-2002-2051

The processorweb plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in a log file...

Unauthorized access in OpenVMS POP3 server

It's possible to overwrite local file by specifing it as a log file...

OpenVMS POP server local vulnerability

Akita Security Advisory 27/09/2002 OpenVMS UCX$POPSERVER.EXE vulnerability Advisory: http://www.akita-security.co.uk/VMS/ucxpopserver.txt VMS security tool http://www.akita-security.co.uk/stoat Overview ======== UCX is the main TCP/IP stack for OpenVMS. Akita Security have discovered a...

CVE-2001-1276

The CVE-2001-1276 vulnerability affects ispell prior to 3.1.20. A local user can exploit a race condition by symlinking a temporary file used by ispell, allowing overwrite of another user’s files. Root cause: ispell used mktemp() for temp files; patches switch to mkstemp() and revise input handli...