8994 matches found
PT-1999-1160 · Unknown +2 · Midnight Commander +1
Name of the Vulnerable Software and Affected Versions: Midnight Commander versions 4.x Description: The issue allows local attackers to conduct a denial of service with a symlink attack. Recommendations: For Midnight Commander versions 4.x, at the moment, there is no information about a newer...
CVE-1999-0434
XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service...
CVE-1999-0433
XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service...
PT-1999-1116 · Xfree86 · Xfree86
Name of the Vulnerable Software and Affected Versions: XFree86 affected versions not specified Description: The XFree86 startx command is susceptible to a symlink attack, enabling local users to create files in restricted directories. This could potentially allow them to gain privileges or cause ...
CVE-1999-0411
Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access...
PT-1999-1096 · Sco · Sco Openserver Enterprise System
Name of the Vulnerable Software and Affected Versions: SCO OpenServer Enterprise System version 5.0.4p Description: The issue concerns several startup scripts in the system, including S84rpcinit, S95nis, S85tcp, and S89nfs, which are susceptible to a symlink attack. This allows a local user to...
CVE-2000-0371
The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack...
CVE-1999-1168
install.iss installation script for Internet Security Scanner ISS for Linux, version 5.3, allows local users to change the permissions of arbitrary files via a symlink attack on a temporary file...
CVE-1999-1495
xtvscreen in SuSE Linux 6.0 allows local users to overwrite arbitrary files via a symlink attack on the pic000.pnm file...
IBM AIX 4.2.1 - 'snap' Insecure Temporary File Creation
source: https://www.securityfocus.com/bid/375/info The snap command is a diagnostic utlitiy for gathering system information on AIX platforms. It can only be executed by root, but it copies various system files into /tmp/ibmsupt/ under /tmp/ibmsupt/general/ you will find the passwd file with...
CVE-1999-0374
Debian GNU/Linux cfengine package is susceptible to a symlink attack...
[SECURITY] New versions of cfengine fixes symlink attack
The maintainer of Debian GNU/Linux cfengine package found a error in the way cfengine handles temporary files when it runs the tidy action on homedirectories, which makes it suspectible to a symlink attack. The author has been notified of the problem but has not released a fix yet. We recommend y...
[SECURITY] New versions of cfengine fixes symlink attack
The maintainer of Debian GNU/Linux cfengine package found a error in the way cfengine handles temporary files when it runs the tidy action on homedirectories, which makes it suspectible to a symlink attack. The author has been notified of the problem but has not released a fix yet. We recommend y...
PT-1999-1061 · Debian · Cfengine
Name of the Vulnerable Software and Affected Versions: Debian GNU/Linux affected versions not specified Description: The issue affects the cfengine package in Debian GNU/Linux, making it susceptible to a symlink attack. Recommendations: At the moment, there is no information about a newer version...
CVE-2000-0005
HP-UX aserver program allows local users to gain privileges via a symlink attack...
CVE-1999-1173
Corel Word Perfect 8 for Linux creates a temporary working directory with world-writable permissions, which allows local users to 1 modify Word Perfect behavior by modifying files in the working directory, or 2 modify files of other users via a symlink attack...
CVE-1999-0836
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack...
SCO Unixware 7.07.0.17.17.1.1 - uidadmin Local Privilege Escalation
SCO Unixware 7.07.0.17.17.1.1 - uidadmin Local Privilege Escalation source: https://www.securityfocus.com/bid/842/info Certain versions of SCO Unixware ship with an exploitable version of the /usr/bin/uidadmin program. The problem lies in that 'uidadmin' runs with root privileges and performs...
SCO Unixware 7.0/7.0.1/7.1/7.1.1 - 'uidadmin' Local Privilege Escalation
source: https://www.securityfocus.com/bid/842/info Certain versions of SCO Unixware ship with an exploitable version of the /usr/bin/uidadmin program. The problem lies in that 'uidadmin' runs with root privileges and performs insecure writes to a scratch directory /tmp/ in this instance. A...