CVE-2005-1846: Undefined Security Weakness

Multiple directory traversal vulnerabilities in YaMT before 0.52 allow attackers to overwrite arbitrary files via the 1 rename or 2 sort options...

CVE-2004-2097: Undefined Security Weakness

Multiple scripts on SuSE Linux 9.0 allow local users to overwrite arbitrary files via a symlink attack on 1 /tmp/fvwm-bug created by fvwm-bug, 2 /tmp/wmmenu created by wm-oldmenu2new, 3 /tmp/rates created by x11perfcomp, 4 /tmp/xf86debug.1.log created by xf86debug, 5 /tmp/.winpopup-new created by...

CVE-2005-1707: Undefined Security Weakness

The fnshowpostinst function in Gentoo webapp-config before 1.10-r14 allows local users to overwrite arbitrary files via a symlink attack on the postinst.txt temporary file...

CVE-2003-1156: Undefined Security Weakness

Java Runtime Environment JRE and Software Development Kit SDK 1.4.2 through 1.4.202 allows local users to overwrite arbitrary files via a symlink attack on 1 unpack.log, as created by the unpack program, or 2 .mailcap1 and .mime.types1, as created by the RPM program...

CVE-2004-2014: Undefined Security Weakness

Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded...

CVE-2003-1155: Undefined Security Weakness

X-CD-Roast 0.98 alpha10 through alpha14 allows local users to overwrite arbitrary files via a symlink attack on an unknown file...

CVE-2004-1958: Undefined Security Weakness

Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via .. dot dot sequences in a UMOD Unreal MOD file...

CVE-2003-1139: Undefined Security Weakness

Musicqueue 1.2.0 allows local users to overwrite arbitrary files by triggering a segmentation fault and using a symlink attack on the resulting musicqueue.crash file...

CVE-2001-1448: Undefined Security Weakness

Magic eDeveloper Enterprise Edition 8.30-5 and earlier allows local users to overwrite arbitrary files and possibly execute code via a symlink attack on temporary files created by the 1 mkuserproc, 2 mgrnt, and 3 mgdatasrvr.sc scripts...

CVE-2005-0610: Undefined Security Weakness

Multiple symlink vulnerabilities in portupgrade before 200412262 in FreeBSD allow local users to 1 overwrite arbitrary files and possibly replace packages to execute arbitrary code via pkgfetch, 2 overwrite arbitrary files via temporary files when portupgrade upgrades a port or package, or 3 crea...

CVE-2005-0465: Undefined Security Weakness

grosview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s option...

CVE-2005-0990

unshar unshar.c in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file...

CVE-2005-0990: Undefined Security Weakness

unshar unshar.c in sharutils 4.2.1 allows local users to overwrite arbitrary files via a symlink attack on the unsh.X temporary file...

CVE-2005-0866: Undefined Security Weakness

cdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2005-0824: Improper Link Resolution Before File Access

The internaldump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dump files that are triggered by a SIGWINCH signal...

CVE-2002-1600: Undefined Security Weakness

Directory traversal vulnerability in Mike Spice's My Classifieds classifieds.cgi before 1.3 allows remote attackers to overwrite arbitrary files via the category parameter...

CVE-2005-0711: Undefined Security Weakness

MySQL 4.0.23 and earlier, and 4.1.x up to 4.1.10, uses predictable file names when creating temporary tables, which allows local users with CREATE TEMPORARY TABLE privileges to overwrite arbitrary files via a symlink attack...

CVE-2005-0587: Improper Link Resolution Before File Access

Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downloading a .LNK link file twice, which overwrites the file that was referenced in the first .LNK file...

CVE-2005-0159: Undefined Security Weakness

The tpkg- scripts in the toolchain-source 3.0.4 package on Debian GNU/Linux 3.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2004-0851: Undefined Security Weakness

The 1 writelist and 2 dumpcurrlist functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files...