CVE-2025-57802 Airlink's Daemon Symlink Vulnerability

Airlink's Daemon interfaces with Docker and the Panel to provide secure access for controlling instances via the Panel. In version 1.0.0, an attacker with access to the affected container can create symbolic links inside the mounted directory /app/data. Because the container bind-mounts an...

aide: improper output neutralization enables bypassing

A flaw was found in AIDE. This flaw allows an attacker to craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and tamper with the log output. A local user may exploit this to bypass AIDE's detection of malicious files...

Linux Distros Unpatched Vulnerability : CVE-2015-1194

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive. CVE-2015-1194 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2017-5188

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bsworker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during...

PT-2025-34689 · Docker +1 · Docker +1

Name of the Vulnerable Software and Affected Versions: Airlink versions prior to 1.0.1 Description: Airlink's Daemon interfaces with Docker and the Panel to provide secure access for controlling instances via the Panel. An attacker with access to the affected container can create symbolic links...

Linux Distros Unpatched Vulnerability : CVE-2017-8108

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file...

Linux Distros Unpatched Vulnerability : CVE-2016-6613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in phpMyAdmin. A user can specially craft a symlink on disk, to a file which phpMyAdmin is permitted to read but the user is not, which...

USN-7714-1 open-vm-tools vulnerabilities

Matthias Gerstner discovered that Open VM Tools incorrectly handled file descriptors when dropping privileges. A local attacker could possibly use this issue to hijack /dev/uinput and simulate user inputs. CVE-2023-34059 Dolev Farhi discovered that Open VM Tools incorrectly handled certain file...

Linux Distros Unpatched Vulnerability : CVE-2008-5367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file...

Linux Distros Unpatched Vulnerability : CVE-2018-10380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack. CVE-2018-10380 Note that Nessus relies ...

Linux Distros Unpatched Vulnerability : CVE-2017-7418

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks...

Linux Distros Unpatched Vulnerability : CVE-2008-5150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-..log temporary file. CVE-2008-5150...

Linux Distros Unpatched Vulnerability : CVE-2004-0423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The logevent function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file...

Linux Distros Unpatched Vulnerability : CVE-2008-5146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file. CVE-2008-5146 Note...

Linux Distros Unpatched Vulnerability : CVE-2008-5366

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/probe-finished or 2...

Linux Distros Unpatched Vulnerability : CVE-2008-4953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.firehol-tmp--- and 2 /tmp/firehol.conf temporary files...

Linux Distros Unpatched Vulnerability : CVE-2008-5152

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...

Linux Distros Unpatched Vulnerability : CVE-2008-4950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disput...

Linux Distros Unpatched Vulnerability : CVE-2008-4996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor...

Linux Distros Unpatched Vulnerability : CVE-2014-4199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a...