CVE-2003-1279: Undefined Security Weakness

S-PLUS 6.0 allows local users to overwrite arbitrary files and possibly elevate privileges via a symlink attack on 1 /tmp/F8499 by Sqpe, 2 /tmp/PRINT.$$.out by PRINT, 3 /tmp/SUBST$PID.TXT and /tmp/ed.cmds$PID by mustfix.hlinks, 4 /tmp/file.1 and /tmp/file.2 by sasget, 5 /tmp/file.1 by sasvars, an...

CVE-2005-3311: Undefined Security Weakness

BMC Software Control-M 6.1.03 for Solaris, and possibly other platforms, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

Mandrake Linux Security Advisory : cfengine (MDKSA-2005:184)

Javier Fernndez-Sanguino Pea discovered several insecure temporary file uses in cfengine = 1.6.5 and = 2.1.16 which allows local users to overwrite arbitrary files via a symlink attack on temporary files used by vicf.in. CVE-2005-2960 In addition, Javier discovered the cfmailfilter and cfcron.in...

DEBIAN-CVE-2005-2992

arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945...

CVE-2005-2992: Undefined Security Weakness

arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of vulnerability than CVE-2005-2945...

CVE-2005-3137: Undefined Security Weakness

The 1 cfmailfilter and 2 cfcron.in files for cfengine 1.6.5 allow local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2005-2960...

CVE-2005-3136

Directory traversal vulnerability in Virtools Web Player 3.0.0.100 and earlier allows remote attackers to overwrite arbitrary files via a .. dot dot in a filename...

CVE-2005-3115: Undefined Security Weakness

mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via 1 ts.stat, 2 ts.mpg, 3 foobar, 4 blockbar, or 5 foobarNNN...

CVE-2005-2663: Undefined Security Weakness

masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file...

CVE-2005-2371: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via 1 "..", 2 Windows drive letter C:, and 3 absolute path sequences in the desname parameter. NOTE: this issue was probably fixed by REP06 in CPU Jan 2006, in which case ...

CVE-2005-2311: Undefined Security Weakness

SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 request1 or 2 request2 temporary files...

CVE-2005-1914: Undefined Security Weakness

CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file...

CVE-2002-2001: Undefined Security Weakness

jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2005-2230: Undefined Security Weakness

Electronic Mail Operator elmo 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite arbitrary files...

CVE-2005-2054: Undefined Security Weakness

Unknown vulnerability in RealPlayer 10 and 10.5 6.0.12.1040-1069 and RealOne Player v1 and v2 allows remote attackers to overwrite arbitrary files or execute arbitrary ActiveX controls via a crafted MP3 file...

CVE-2002-1890: Undefined Security Weakness

rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file...

CVE-2002-1737: Undefined Security Weakness

Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrary files...

CVE-2005-1725: Undefined Security Weakness

launchd 106 in Apple Mac OS X 10.4.x up to 10.4.1 allows local users to overwrite arbitrary files via a symlink attack on the socket file in an insecure temporary directory...

CVE-2005-1879: Improper Link Resolution Before File Access

LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget...

CVE-2005-1878: Undefined Security Weakness

GIPTables Firewall 1.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the temp.ip.addresses temporary file...