8931 matches found
USN-7714-1 open-vm-tools vulnerabilities
Matthias Gerstner discovered that Open VM Tools incorrectly handled file descriptors when dropping privileges. A local attacker could possibly use this issue to hijack /dev/uinput and simulate user inputs. CVE-2023-34059 Dolev Farhi discovered that Open VM Tools incorrectly handled certain file...
Linux Distros Unpatched Vulnerability : CVE-2008-5367
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip-up in ppp-udeb 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the /tmp/resolv.conf.tmp temporary file...
Linux Distros Unpatched Vulnerability : CVE-2018-10380
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kwallet-pam in KDE KWallet before 5.12.6 allows local users to obtain ownership of arbitrary files via a symlink attack. CVE-2018-10380 Note that Nessus relies ...
Linux Distros Unpatched Vulnerability : CVE-2008-5150
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-..log temporary file. CVE-2008-5150...
Linux Distros Unpatched Vulnerability : CVE-2004-0423
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The logevent function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file...
Linux Distros Unpatched Vulnerability : CVE-2008-4950
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gccross in dpkg-cross 2.3.0 allows local users to overwrite arbitrary files via a symlink attack on the tmp/gccross2.log temporary file. NOTE: the vendor disput...
Linux Distros Unpatched Vulnerability : CVE-2008-4953
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - firehol in firehol 1.256 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/.firehol-tmp--- and 2 /tmp/firehol.conf temporary files...
Linux Distros Unpatched Vulnerability : CVE-2008-5146
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - add-accession-numbers in ctn 3.0.6 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/accession temporary file. CVE-2008-5146 Note...
Linux Distros Unpatched Vulnerability : CVE-2008-5152
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...
Linux Distros Unpatched Vulnerability : CVE-2008-4996
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor...
Linux Distros Unpatched Vulnerability : CVE-2008-5366
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The postinst script in ppp 2.4.4rel on Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/probe-finished or 2...
Linux Distros Unpatched Vulnerability : CVE-2014-4199
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a...
Linux Distros Unpatched Vulnerability : CVE-2008-5144
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the...
Linux Distros Unpatched Vulnerability : CVE-2005-1119
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sudo VISudo 1.6.8 and earlier allows local users to corrupt arbitrary files via a symlink attack on temporary files. CVE-2005-1119 Note that Nessus relies on th...
Linux Distros Unpatched Vulnerability : CVE-2014-1934
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tag.py in eyeD3 aka python-eyed3 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file...
Linux Distros Unpatched Vulnerability : CVE-2024-1329
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user...
Symlink Attack
Overview n8n-core is a Core functionality of n8n Affected versions of this package are vulnerable to Symlink Attack via the Read/Write File node. An attacker can access restricted files by creating symbolic links that bypass directory restrictions. Remediation Upgrade n8n-core to version 1.106.0 ...
Linux Distros Unpatched Vulnerability : CVE-2025-3908
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlinks pointing at an arbitrary directory whi...
Linux Distros Unpatched Vulnerability : CVE-2017-18869
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended directories via...
