8918 matches found
Code injection
The scheme48-send-definition function in cmuscheme48.el in Scheme 48 allows local users to write to arbitrary files via a symlink attack on /tmp/s48lose.tmp...
CVE-2014-4150
The scheme48-send-definition function in cmuscheme48.el in Scheme 48 allows local users to write to arbitrary files via a symlink attack on /tmp/s48lose.tmp...
CVE-2014-4150
The scheme48-send-definition function in cmuscheme48.el in Scheme 48 allows local users to write to arbitrary files via a symlink attack on /tmp/s48lose.tmp...
CVE-2014-4150
The CVE-2014-4150 vulnerability affects Scheme 48, specifically the scheme48-send-definition function in cmuscheme48.el. The issue allows a local attacker to write to arbitrary files by exploiting a symlink attack on /tmp/s48lose.tmp. The public-facing details clearly describe the root cause as a...
CVE-2014-4150
The scheme48-send-definition function in cmuscheme48.el in Scheme 48 allows local users to write to arbitrary files via a symlink attack on /tmp/s48lose.tmp...
Code injection
CheckMK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/lib/checkmkagent/job...
CVE-2014-0243
CheckMK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/lib/checkmkagent/job...
CVE-2014-0243
CheckMK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/lib/checkmkagent/job...
CVE-2014-0243
CVE-2014-0243 affects Check_MK through 1.2.5i2p1. Local attackers can read arbitrary files by exploiting a symlink in /var/lib/check_mk_agent/job leading to a file disclosure. The connected Nessus data indicates affected Linux builds (e.g., 1.2.3i pre-1.2.5i3) and references a mitigation path: up...
CVE-2014-0243
CheckMK through 1.2.5i2p1 allows local users to read arbitrary files via a symlink attack to a file in /var/lib/checkmkagent/job...
CVE-2018-14329
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...
UBUNTU-CVE-2018-14329
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...
Race condition
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...
CVE-2018-14329
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...
DEBIAN-CVE-2018-14329
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...
CVE-2018-14329
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...
CVE-2018-14329
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...
CVE-2018-14329
CVE-2018-14329: In HTSlib 1.8, a race condition in cram/cram_io.c can allow local users to overwrite arbitrary files via a symlink attack. Exploitation details are not described in the provided connected documents; no patch/version remediation is listed. Impact is local unauthorized file modifica...
CVE-2018-14329
In HTSlib 1.8, a race condition in cram/cramio.c might allow local users to overwrite arbitrary files via a symlink attack...
Debian DLA-1420-1 : cinnamon security update
It was discovered that there was a symlink attack in the Cinnamon desktop environment. An attacker could overwrite an arbitrary file on the filesystem via a $HOME/.face icon file as the cinnamon-settings-users.py GUI runs as root. For Debian 8 'Jessie', this issue has been fixed in cinnamon versi...