762 matches found
CVE-2009-5080: Improper Link Resolution Before File Access
The 1 contrib/eqn2graph/eqn2graph.sh, 2 contrib/grap2graph/grap2graph.sh, and 3 contrib/pic2graph/pic2graph.sh scripts in GNU troff aka groff 1.21 and earlier do not properly handle certain failed attempts to create temporary directories, which might allow local users to overwrite arbitrary files...
CVE-2009-5044
contrib/pdfmark/pdfroff.sh in GNU troff aka groff before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf.tmp temporary file...
CVE-2009-5044: Improper Link Resolution Before File Access
contrib/pdfmark/pdfroff.sh in GNU troff aka groff before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf.tmp temporary file...
CVE-2011-2533
The configure script in D-Bus aka DBus 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/...
PT-2011-1153
Name of the Vulnerable Software and Affected Versions D-Bus versions prior to 1.4.12 D-Bus versions 1.2.x before 1.2.28 Description The issue concerns multiple vulnerabilities in the D-Bus package, which can be exploited locally to compromise the confidentiality, integrity, and availability of...
PT-2011-3895
Name of the Vulnerable Software and Affected Versions OProfile versions 0.9.6 and earlier Description A directory traversal issue exists, potentially allowing local users to overwrite arbitrary files by providing a .. dot dot in the --save argument, related to the --session-dir argument...
CVE-2011-1595: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the diskcreate function in disk.c in rdesktop before 1.7.0, when disk redirection is enabled, allows remote RDP servers to read or overwrite arbitrary files via a .. dot dot in a pathname...
PT-2011-3476
Name of the Vulnerable Software and Affected Versions NetBSD versions prior to 1.6.2 pmake version 1.111 Description The issue allows local users to overwrite arbitrary files via a symlink attack on a /tmp/ depend temporary file. This is related to the bsd.lib.mk and bsd.prog.mk include files...
CVE-2011-1920: Improper Link Resolution Before File Access
The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users to overwrite arbitrary files via a symlink attack on a /tmp/depend temporary file, related to 1 bsd.lib.mk and 2 bsd.prog.mk...
PT-2011-1115
Name of the Vulnerable Software and Affected Versions SPICE Firefox plug-in spice-xpi versions 2.2 through 2.4 Description The issue allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name. Multiple vulnerabilities in the...
Mandriva Update for xmlsec1 MDVSA-2011:063 (xmlsec1)
Check for the Version of xmlsec1 OpenVAS Vulnerability Test Mandriva Update for xmlsec1 MDVSA-2011:063 xmlsec1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
PT-2011-2363
Name of the Vulnerable Software and Affected Versions aaa base versions prior to 11.2-43.48.1 in SUSE openSUSE 11.2 aaa base versions prior to 11.3-8.7.1 in openSUSE 11.3 Description The issue allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab. This is due to a...
CVE-2011-0461: Improper Link Resolution Before File Access
/etc/init.d/boot.localfs in the aaabase package before 11.2-43.48.1 in SUSE openSUSE 11.2, and before 11.3-8.7.1 in openSUSE 11.3, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/mtab...
CVE-2010-4651
Directory traversal vulnerability in util.c in GNU patch 2.6.1 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files via a filename that is specified with a .. dot dot or full pathname, a related issue to CVE-2010-1679...
PT-2011-2903
Name of the Vulnerable Software and Affected Versions PEAR versions 1.9.2 and earlier Description The issue allows local users to overwrite arbitrary files via a symlink attack on the package.xml file. This is related to the download dir, cache dir, tmp dir, and pear-build-download directories. T...
PT-2011-2854
Name of the Vulnerable Software and Affected Versions PEAR versions prior to 1.9.2 Description The issue allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the download dir, cache dir, tmp dir, and pear-build-download directories...
CVE-2011-1072
The installer in PEAR before 1.9.2 allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories, a different vulnerability than CVE-2007-2519...
CVE-2011-1144: Improper Link Resolution Before File Access
The installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories. NOTE: this vulnerability exists because of an incomplete fix for...
CVE-2011-1144
The installer in PEAR 1.9.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the package.xml file, related to the 1 downloaddir, 2 cachedir, 3 tmpdir, and 4 pear-build-download directories. NOTE: this vulnerability exists because of an incomplete fix for...