8894 matches found
Arbitrary file deletion
findflags in Kitware GCC-XML gccxml 0.9.0 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.cxx temporary file...
Code injection
arb-common 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/arbfdnaml, b /tmp/arbpids, c /tmp/arbdsmz.html, and d /tmp/arbdsmz.htm temporary files, related to the 1 arbfastdnaml and 2 dszmconnect.pl scripts...
Design/Logic Flaw
dhis-dummy-log-engine in dhis-server 5.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/dhis-dummy-log-engine.log temporary file...
Code injection
dtc 0.29.6 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/awstats.log, b /tmp/spam.log., and c /tmp/spamerr.log temporary files, related to the 1 accesslog.php and 2 sa-wrapper scripts...
Design/Logic Flaw
bulmages-servers 0.11.1 allows local users to overwrite arbitrary files via a symlink attack on the a /tmp/error.txt, b /tmp/errores.txt, and possibly other temporary files, related to the 1 creabulmafact, 2 creabulmacont, and possibly 3 actualizabulmacont, 4 installbulmages-db, and 5...
Code injection
audiolink in audiolink 0.05 allows local users to overwrite arbitrary files via a symlink attack on the 1 /tmp/audiolink.db.tmp and 2 /tmp/audiolink.tb.tmp temporary files...
Arbitrary file deletion
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp. temporary file...
CVE-2008-4940
xmlfile.py in aptoncd 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/aptoncd temporary file...
CVE-2008-4954
mead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/debugbuf temporary file...
CVE-2008-4952
emacs-jabber in emacs-jabber 0.7.91 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.log temporary file...
CVE-2008-4947
dhis-dummy-log-engine in dhis-server 5.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/dhis-dummy-log-engine.log temporary file...
CVE-2008-4945
amlabel-cdrw in cdrw-taper 0.4 might allow local users to overwrite arbitrary files via a symlink attack involving a /tmp/amlabel-cdrw. temporary directory...
CVE-2008-4944
writtercontrol in cdcontrol 1.90 allows local users to overwrite arbitrary files via a symlink attack on /tmp/v-recorder-out temporary files...
Design/Logic Flaw
gdrae in gdrae 0.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gdrae/palabra temporary file...
CVE-2008-4959
geo-code in gpsdrive-scripts 2.10pre4 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/geo.google, 2 /tmp/geo.yahoo, 3 /tmp/geo.coords, and 4 /tmp/geo.coords temporary files...
CVE-2008-4936
faxspool in mgetty 1.1.36 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/faxsp. temporary file...
Design/Logic Flaw
aegis 4.24 and aegis-web 4.24 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/, b /tmp/.intro, c /tmp/aegis..ae, d /tmp/aegis., e /tmp/aegis..1, f /tmp/aegis..2, g /tmp/aegis..log, and h /tmp/aegis..out temporary files, related to the 1 bngdvlpd.sh, 2 bngrvwd.sh, 3...
Design/Logic Flaw
mead.pl in fml 4.0.3 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/debugbuf temporary file...
Code injection
apertium 3.0.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.lex.cc, b /tmp/.deformat.l, c /tmp/.reformat.l, d /tmp/docxorig, e /tmp/docxsalida.zip, f /tmp/xlsxembed, g /tmp/xlsxorig, and h /tmp/xslxsalida.zip temporary files, related to the 1...