CVE-2006-1611: Undefined Security Weakness

Directory traversal vulnerability in KGB Archiver before 1.1.5.22 allows remote attackers to overwrite arbitrary files wile decompressing an archive, possibly due to directory traversal sequences in a filename...

CVE-2006-0745: Undefined Security Weakness

X.Org server xorg-server 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and 1 execute arbitrary code via the -modulepath command line optio...

CVE-2005-2714: Improper Link Resolution Before File Access

passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to overwrite arbitrary files via a symlink attack on the .pwtmp.PID temporary file...

CVE-2006-0926: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21 allow remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a 1 zip or 2 tar archive...

CVE-2003-0885: Undefined Security Weakness

Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the 1 apple2, 2 xanalogtv, and 3 pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack...

CVE-2005-1918: Improper Limitation of a Pathname to a Restricted Directory

The original patch for a GNU tar directory traversal vulnerability CVE-2002-0399 in Red Hat Enterprise Linux 3 and 2.1 uses an "incorrect optimization" that allows user-assisted attackers to overwrite arbitrary files via a crafted tar file, probably involving "/../" sequences with a leading "/"...

CVE-2005-3342: Undefined Security Weakness

noweb 2.10c and earlier allows local users to overwrite arbitrary files via symlink attacks on temporary files in 1 lib/toascii.nw and 2 shell/roff.mm...

CVE-2006-0512: Undefined Security Weakness

PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the temporary files, which are not properly created by 1 migrateallonline.sh, 2 migratealloffline.sh, 3 migrateallnetinfoonline.sh, 4 migrateallnetinfooffline.s...

CVE-2005-4536: Undefined Security Weakness

Mail::Audit module in libmail-audit-perl 2.1-5, when logging is enabled without a default log file specified, uses predictable log filenames, which allows local users to overwrite arbitrary files via a symlink attack on the PID-audit.log temporary file...

CVE-2005-3126: Improper Link Resolution Before File Access

The 1 kantiword kantiword.sh and 2 gantiword gantiword.sh scripts in antiword 0.35 and earlier allow local users to overwrite arbitrary files via a symlink attack on temporary a output and b error files...

CVE-2006-0055: Undefined Security Weakness

The ispellop function in ee on FreeBSD 4.10 to 6.0 uses predictable filenames and does not confirm which file is being written, which allows local users to overwrite arbitrary files via a symlink attack when ee invokes ispell...

CVE-2005-3240

Race condition in Microsoft Internet Explorer allows user-assisted attackers to overwrite arbitrary files and possibly execute code by tricking a user into performing a drag-and-drop action from certain objects, such as file objects within a folder view, then predicting the drag action, and...

CVE-2005-4534: Undefined Security Weakness

The shadow database feature syncshadowdb in Bugzilla 2.9 through 2.16.10 allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-3341: Undefined Security Weakness

DHIS tools DNS package dhis-tools-dns before 5.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files created by 1 register-q.sh and 2 register-p.sh...

CVE-2005-3885: Undefined Security Weakness

The ps2epsi extension shell script ps2epsi.sh in Inkscape before 0.41 allows local users to overwrite arbitrary files via a symlink attack on the tmpepsifile.epsi temporary file...

CVE-2004-2605: Undefined Security Weakness

aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on 1 the aStats-Graphic-Signature-Generation file and 2 certain PNG image files...

CVE-2005-3811: Undefined Security Weakness

Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 build 0824 and earlier allows remote attackers to overwrite arbitrary files with session information via the sid parameter...

CVE-2005-3785

Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX eix before 0.5.0pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which is processed by the diff-eix program...

CVE-2005-3785: Undefined Security Weakness

Second-order symlink vulnerability in eix-sync.in in Ebuild IndeX eix before 0.5.0pre2 allows local users to overwrite arbitrary files via a symlink attack on the exi.X.sync temporary file, which is processed by the diff-eix program...

CVE-2004-2569: Undefined Security Weakness

ipmenu 0.0.3 before Debian GNU/Linux ipmenu0.0.3-5 allows local users to overwrite arbitrary files via a symlink attack on the ipmenu.log temporary file...