24 matches found
ssmtp symbolic links problem
Log file is created in /tmp without checking for symlinks...
CVE-2002-1508
slapd in OpenLDAP2 OpenLDAP 2 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests...
CVE-2002-1508
CVE-2002-1508 affects OpenLDAP2 (OpenLDAP 2) where the slapd service on version 2.2.0 and earlier is vulnerable to a race condition that can allow a local user to overwrite arbitrary files during the creation of a log file for rejected replication requests. The vulnerability is rooted in how the ...
CVE-1999-0961
HPUX sysdiag contains a local privilege escalation where an unprivileged user can gain root via a symlink attack during log file creation. The Root Cause is a symlink handling vulnerability in the log file creation path. Affected software is HP-UX sysdiag (no specific version ranges provided in t...