PT-2012-4657

Name of the Vulnerable Software and Affected Versions ioquake3 versions prior to r2253 Description The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file. Recommendations For versions prior to r2253, update to version r2253 or later to...

CVE-2012-3345: Improper Link Resolution Before File Access

ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file...

PT-2012-3566

Name of the Vulnerable Software and Affected Versions Emerson DeltaV versions 9.3.1 through 11.3.1 Emerson DeltaV Workstations versions 9.3.1 through 11.3.1 DeltaV ProEssentials Scientific Graph version 5.0.0.6 Description The issue allows remote attackers to overwrite arbitrary files via unknown...

PT-2012-1140

Name of the Vulnerable Software and Affected Versions Puppet versions 2.6.x through 2.6.14 Puppet versions 2.7.x through 2.7.12 Puppet Enterprise PE Users versions 1.0 through 1.2.x Puppet Enterprise PE Users versions 2.0.x through 2.5.0 Description The issue affects the confidentiality, integrit...

CVE-2011-2722: Improper Link Resolution Before File Access

The senddatatostdout function in prnt/hpijs/hpcupsfax.cpp in HP Linux Imaging and Printing HPLIP 3.x before 3.11.10 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file...

CVE-2012-2093: Improper Link Resolution Before File Access

src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the gettmpfilename function...

PT-2012-3802

Name of the Vulnerable Software and Affected Versions Gajim version 0.15 Description The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the get tmpfile name function in src/common/latex.py. Recommendations For Gajim version 0.15,...

PT-2012-3818

Name of the Vulnerable Software and Affected Versions texlive-extra-utils version 2011.20120322 Description The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file when latex2man is used with the H or T option. Recommendations For texlive-extra-utils...

CVE-2012-1931: Undefined Security Weakness

Opera before 11.62 on UNIX, when used in conjunction with an unspecified printing application, allows local users to overwrite arbitrary files via a symlink attack on a temporary file during printing...

PT-2012-3663

Name of the Vulnerable Software and Affected Versions Opera versions prior to 11.62 on UNIX Description The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file during printing, when used in conjunction with an unspecified printing application...

PT-2012-6307

Name of the Vulnerable Software and Affected Versions GoLismero versions prior to Git revision 2b3bb43d6867 Description The issue allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files. This can be demonstrated using the Admin/changes.dat file...

PT-2012-2267

Name of the Vulnerable Software and Affected Versions GoLismero versions prior to Git revision 2b3bb43d6867 Description The issue allows local users to overwrite arbitrary files via a symlink attack on GoLismero-controlled files. This can be demonstrated using the Admin/changes.dat file...

PT-2012-1101

Name of the Vulnerable Software and Affected Versions HP Linux Imaging and Printing HPLIP versions 3.x through 3.11.9 Description The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/hpcupsfax.out temporary file, potentially leading to disruption of...

OpenVAS Scanner Symlink Attack Local Privilege Escalation Vulnerability

This host is installed with OpenVAS Scanner and is prone to privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbopenvasscannerprevesclvuln.nasl 7823 2017-11-20 08:54:04Z cfischer $ OpenVAS Scanner Symlink Attack Local Privilege Escalation Vulnerability Authors: Antu Sanadi...

CVE-2011-4617

virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/...

PT-2011-5011

Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 1.5 Description The issue allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/. Recommendations For versions prior to 1.5, update to version 1.5 or later to resolve the...

CVE-2011-4617: Improper Link Resolution Before File Access

virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/...

CVE-2011-4596

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted 1 tarball or 2 manifest...

CVE-2011-4606

Artsoft Entertainment Rocks'n'Diamonds aka rocksndiamonds 3.3.0.1 allows local users to overwrite arbitrary files via a symlink attack on .rocksndiamonds/cache/artworkinfo.cache under a user's home directory...

CVE-2011-4606: Undefined Security Weakness

Artsoft Entertainment Rocks'n'Diamonds aka rocksndiamonds 3.3.0.1 allows local users to overwrite arbitrary files via a symlink attack on .rocksndiamonds/cache/artworkinfo.cache under a user's home directory...