Arbitrary Files Overwrite

xcal is vulnerable to arbitrary files overwrite. The library allows local users to overwrite arbitrary files via a symlink attack on a /tmp/pscal temporary file directory...

Unrestricted Access

scheme48 is vulnerable to unrestricted access. This vulnerability allows local users to write to arbitrary files via a symlink attack on /tmp/s48lose.tmp...

Arbitrary Files Overwrite

lookup-el is vulnerable to arbitrary files overwrite. The ndeb-binary feature allows local users to overwrite arbitrary files via a symlink attack on temporary files...

Denial Of Service (DoS)

nsd is vulnerable to denial of service. An attacker is able to overwrite the PID file via a local symlink attack which will cause the application to crash...

Unbound/NSD -- Denial of service vulnerability

NLNetLabs reports: Unbound and NSD when writing the PID file would not check if an existing file was a symlink. This could allow for a local symlink \ attack if an attacker has access to the user Unbound/NSD runs as...

CVE-2020-27697

Trend Micro Security 2020 Consumer contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a non-protected location with high privileges symlink attack which can lead to obtaining administrative privileges during the installation of the product...

CVE-2020-27697

Trend Micro Security 2020 Consumer contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a non-protected location with high privileges symlink attack which can lead to obtaining administrative privileges during the installation of the product...

Input validation

Trend Micro Security 2020 Consumer contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a non-protected location with high privileges symlink attack which can lead to obtaining administrative privileges during the installation of the product...

CVE-2020-27697

CVE-2020-27697 : Trend Micro Security 2020 (Consumer) installer package vulnerable to a local privilege escalation via a symlink attack (placing a malicious DLL in an unprotected, high-privilege location) during installation. Multiple sources report this as a local elevation-of-privilege issue af...

CVE-2020-27697

Trend Micro Security 2020 Consumer contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a non-protected location with high privileges symlink attack which can lead to obtaining administrative privileges during the installation of the product...

CVE-2020-23968

Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on ProgramData\Ilex\S&G\Logs\000-sngWSService1.log...

CVE-2020-23968

Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on ProgramData\Ilex\S&G\Logs\000-sngWSService1.log...

Privilege escalation

Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on ProgramData\Ilex\S&G\Logs\000-sngWSService1.log...

CVE-2020-23968

Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on ProgramData\Ilex\S&G\Logs\000-sngWSService1.log...

CVE-2020-23968

CVE-2020-23968 affects Ilex International Sign&go Workstation Security Suite 7.1. It enables local privilege escalation via a symlink attack on the log file at ProgramData\Ilex\S&G\Logs\000-sngWSService1.log. Root cause is path/symlink manipulation leading to improper file write access; exploitat...

PT-2020-15606

Name of the Vulnerable Software and Affected Versions Ilex International Sign&go Workstation Security Suite version 7.1 Description The issue allows elevation of privileges via a symlink attack on the file ProgramDataIlexS&GLogs000-sngWSService1.log. This can lead to arbitrary file creation and...

Moderate: Red Hat Security Advisory: oddjob security, bug fix, and enhancement update

An update for oddjob is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

oddjob: race condition in oddjob_selinux_mkdir function in mkhomedir.c can lead to symlink attack

A race condition was found in the mkhomedir tool shipped with the oddjob package. During the home creation, mkhomedir copies the /etc/skel directory into the newly created home and changes its ownership to the home's user without properly checking the homedir path. This flaw allows an attacker to...

RHEL 8 : oddjob (RHSA-2020:4687)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4687 advisory. The oddjob packages contain a D-Bus service which performs particular tasks for clients which connect to it and issue requests using the system-wide...

openSUSE: Security Advisory for icinga2 (openSUSE-SU-2020:1820-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...