PT-2011-2571

Name of the Vulnerable Software and Affected Versions feh versions prior to 1.11.2 Description The issue is related to a potential symlink attack on a /tmp/feh temporary file, which could allow local users to overwrite arbitrary files. This is due to a problem in the feh unique filename function ...

CVE-2011-0702: Improper Link Resolution Before File Access

The fehuniquefilename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack on a /tmp/feh temporary file...

CVE-2010-3450

Multiple directory traversal vulnerabilities in OpenOffice.org OOo 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary files via a .. dot dot in an entry in 1 an XSLT JAR filter description file, 2 an Extension aka OXT file, or unspecified other 3 JAR or 4 ZIP files...

CVE-2010-4337

The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/gnash-configure-errors.$$, 2 /tmp/gnash-configure-warnings.$$, or 3 /tmp/gnash-configure-recommended.$$ files...

PT-2011-1506

Name of the Vulnerable Software and Affected Versions gnash version 0.8.8 Description The issue allows local users to overwrite arbitrary files via a symlink attack on temporary files created by the configure script. Specifically, the attack targets the /tmp/gnash-configure-errors.$$,...

CVE-2010-4337: Improper Link Resolution Before File Access

The configure script in gnash 0.8.8 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/gnash-configure-errors.$$, 2 /tmp/gnash-configure-warnings.$$, or 3 /tmp/gnash-configure-recommended.$$ files...

CVE-2011-0007

pimd 2.1.5 and possibly earlier versions allows user-assisted local users to overwrite arbitrary files via a symlink attack on 1 pimd.dump when a USR1 signal is sent, or 2 pimd.cache when USR2 is sent...

CVE-2011-0007: Improper Link Resolution Before File Access

pimd 2.1.5 and possibly earlier versions allows user-assisted local users to overwrite arbitrary files via a symlink attack on 1 pimd.dump when a USR1 signal is sent, or 2 pimd.cache when USR2 is sent...

PT-2011-2009

Name of the Vulnerable Software and Affected Versions pimd versions 2.1.5 and earlier Description The issue allows local users to overwrite arbitrary files via a symlink attack on certain files when specific signals are sent. This can occur with pimd.dump when a USR1 signal is sent, or with...

PT-2010-5336

Name of the Vulnerable Software and Affected Versions libsdp versions 1.1.104 and earlier Description The default configuration of libsdp.conf in libsdp creates log files in /tmp, which allows local users to overwrite arbitrary files via a 1 symlink or 2 hard link attack on the libsdp.log tempora...

CVE-2010-4027: Undefined Security Weakness

Unspecified vulnerability in the camera application in HP Palm webOS 1.4.1 allows local users to overwrite arbitrary files via unknown vectors...

PT-2010-3340

Name of the Vulnerable Software and Affected Versions OpenFabrics Enterprise Distribution OFED version 1.5.2 Description The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ib set node desc.sh temporary file. Recommendations For OpenFabrics Enterprise...

PT-2010-1809

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect SSL VPN trial client on Linux affected versions not specified Description The issue allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files. Recommendations At the moment, there is n...

CVE-2009-5007: Improper Link Resolution Before File Access

The Cisco trial client on Linux for Cisco AnyConnect SSL VPN allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files...

CVE-2010-3691

PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary files via a symlink attack on an unspecified file...

PT-2010-5004

Name of the Vulnerable Software and Affected Versions phpCAS versions prior to 1.1.3 Description The issue allows local users to overwrite arbitrary files via a symlink attack when proxy mode is enabled. This is due to a vulnerability in the PGTStorage/pgt-file.php file. Recommendations For...

CVE-2010-2794: Improper Link Resolution Before File Access

The SPICE aka spice-xpi plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log file...

CVE-2010-3099: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in SmartSoft Ltd SmartFTP Client 4.0.1124.0, and possibly other versions before 4.0 Build 1133, allows remote FTP servers to overwrite arbitrary files via a ".." dot dot backslash in a filename. NOTE: some of these details are obtained from third party informatio...

CVE-2010-3097: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in WinFrigate Frigate 3 FTP client 3.36 and earlier allows remote FTP servers to overwrite arbitrary files via a ".." dot dot backslash in a filename...

CVE-2010-3100: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Porta+ FTP Client 4.1, and possibly other versions, allows remote FTP servers to overwrite arbitrary files via a directory traversal sequences in a filename...