Lucene search
+L

762 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/06/25 12:00 a.m.•7 views

CVE-2001-1119: Undefined Security Weakness

cda in xmcd 3.0.2 and 2.6 in SuSE Linux allows local users to overwrite arbitrary files via a symlink attack...

6.2CVSS5.8AI score0.00401EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/06/25 12:00 a.m.•6 views

CVE-2002-0044: Undefined Security Weakness

GNU Enscript 1.6.1 and earlier allows local users to overwrite arbitrary files of the Enscript user via a symlink attack on temporary files...

3.6CVSS5.8AI score0.00351EPSS
SaveExploits0References1
exploitpack
exploitpack
•added 2002/05/29 12:00 a.m.•22 views

Caldera OpenServer 5.0.55.0.6 - SCOAdmin Symbolic Link

Caldera OpenServer 5.0.55.0.6 - SCOAdmin Symbolic Link source: https://www.securityfocus.com/bid/4875/info A vulnerability has been reported in the scoadmin utility that may allow a local attacker to overwrite any file. The vulnerability is due to the predictable naming of temporary files used by...

0.1AI score
SaveExploits0
CVE
CVE
•added 2002/05/03 4:00 a.m.•62 views

CVE-2001-1346

ARCserveIT 6.61 and 6.63 (ARCservIT) are affected by a local vulnerability where an attacker can overwrite arbitrary files via a symlink attack on temporary files (asagent.tmp or inetd.tmp). The underlying issue is insecure handling of temporary files leading to local privilege impact with partia...

1.2CVSS6.8AI score0.00606EPSS
SaveExploits2References3Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/05/03 12:00 a.m.•5 views

CVE-2001-1346: Undefined Security Weakness

Computer Associates ARCserveIT 6.61 and 6.63 also called ARCservIT allows local users to overwrite arbitrary files via a symlink attack on the temporary files 1 asagent.tmp or 2 inetd.tmp...

1.2CVSS5.8AI score0.00606EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/05/03 12:00 a.m.•5 views

CVE-2002-0210: Undefined Security Weakness

setlicense for TOLIS Group Backup and Restore Utility BRU 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file...

7.2CVSS5.8AI score0.00887EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/05/03 12:00 a.m.•8 views

CVE-2001-1271: Undefined Security Weakness

Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. dot dot attack on archived filenames...

2.1CVSS5.9AI score0.00579EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/03/15 12:00 a.m.•8 views

CVE-2002-0137: Undefined Security Weakness

CDRDAO 1.1.4 and 1.1.5 allows local users to overwrite arbitrary files via a symlink attack on the $HOME/.cdrdao configuration file...

7.2CVSS5.8AI score0.00752EPSS
SaveExploits4References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/03/15 12:00 a.m.•6 views

CVE-2001-1102: Undefined Security Weakness

Check Point FireWall-1 3.0b through 4.1 for Solaris allows local users to overwrite arbitrary files via a symlink attack on temporary policy files that end in a .cpp extension, which are set world-writable...

6.2CVSS5.8AI score0.00299EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/03/15 12:00 a.m.•6 views

CVE-2001-1197: Undefined Security Weakness

klprfaxfilter in KDE2 KDEUtils allows local users to overwrite arbitrary files via a symlink attack on the klprfax.filter temporary file...

4.6CVSS5.8AI score0.00329EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/03/09 12:00 a.m.•5 views

CVE-1999-1037: Undefined Security Weakness

rex.satan in SATAN 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rex.$$ file...

7.2CVSS5.8AI score0.00349EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/03/09 12:00 a.m.•6 views

CVE-1999-1177: Undefined Security Weakness

Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. dot dot in the pathname for an upload operation...

5CVSS6AI score0.02881EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/02/02 12:00 a.m.•5 views

CVE-2001-1041: Undefined Security Weakness

oracle program in Oracle 8.0.x, 8.1.x and 9.0.1 allows local users to overwrite arbitrary files via a symlink attack on an Oracle log trace .trc file that is created in an alternate home directory identified by the ORACLEHOME environment variable...

2.1CVSS5.9AI score0.00584EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2001/12/17 12:00 a.m.•31 views

klprfax_filter symlink vulnerability

hi,all ! i'm sorry if this bug has been reported. klprfaxfilter kdeutils-2.2-2,is an application to make a printer that acts as a fax. when using klprfaxfilter,it would creat a temp file,/tmp/klprfax.filter,but the temporary file was not created safely,this vulnerability could be exploited to...

1.9AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/11/22 12:00 a.m.•6 views

CVE-2001-0832: Undefined Security Weakness

Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in 1 the ORACLEHOME/rdbms/log directory or 2 an alternate directory as specified in the ORACLEHOME environmental variable, aka the "Orac...

2.1CVSS5.9AI score0.00489EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/10/12 12:00 a.m.•5 views

CVE-2001-0736: Undefined Security Weakness

Vulnerability in 1 pine before 4.33 and 2 the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack...

2.1CVSS5.9AI score0.00815EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/09/18 12:00 a.m.•4 views

CVE-2001-0095: Undefined Security Weakness

catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the smanPID temporary file...

1.2CVSS5.8AI score0.00572EPSS
SaveExploits4References1
CVE
CVE
•added 2001/09/12 4:00 a.m.•54 views

CVE-1999-1038

Tiger 2.2.3 is affected by a local privilege issue where an attacker can overwrite arbitrary files via a symlink attack on temporary files in Tiger’s default working directory (WORKDIR). The root cause is a symlink vulnerability in how temporary files are handled, enabling local users to achieve ...

7.2CVSS7.1AI score0.00345EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/09/12 12:00 a.m.•5 views

CVE-1999-1038: Undefined Security Weakness

Tiger 2.2.3 allows local users to overwrite arbitrary files via a symlink attack on various temporary files in Tiger's default working directory, as defined by the WORKDIR variable...

7.2CVSS5.9AI score0.00345EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/09/12 12:00 a.m.•4 views

CVE-1999-1227: Undefined Security Weakness

Ethereal allows local users to overwrite arbitrary files via a symlink attack on the packet capture file...

7.2CVSS5.8AI score0.00346EPSS
SaveExploits0References1
Rows per page
Query Builder