8841 matches found
CVE-2005-2449
Race condition in sandbox before 1.2.11 allows local users to create or overwrite arbitrary files via symlink attack on sandboxpids.tmp...
CVE-2005-2311
SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 request1 or 2 request2 temporary files...
CVE-2005-2311
CVE-2005-2311 affects SMS 1.9.2m and earlier. The vulnerability is a local file overwrite via a symlink attack on temporary files (request1 or request2), caused by improper handling of symbolic links in the temporary file paths. Impact is local privilege concerns (I = PARTIAL) with no confidentia...
CVE-2005-2300
Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skypeprofile.jpg temporary file...
CVE-2005-2300
Skype 1.1.0.20 and earlier allows local users to overwrite arbitrary files via a symlink attack on the skypeprofile.jpg temporary file...
CVE-2005-2311
SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 request1 or 2 request2 temporary files...
CVE-2005-2300
CVE-2005-2300 (Skype) affects Skype versions up to 1.1.0.20. The flaw enables a local user to overwrite arbitrary files via a symlink attack on the temporary file skype_profile.jpg. The NVD entry lists a local access vector with low base score (2.1) and partial integrity impact; confidentiality a...
CVE-2005-1914
CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file...
CVE-2005-1914
CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file...
CVE-2004-2231
Technical details about CVE-2004-2231 are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2005-1914
CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file...
CVE-2004-2231
Zero G Software InstallAnywhere 5.0.6, 5.0.7, and earlier allows local users to overwrite arbitrary files via a symlink attack on the 1 persistentstate or 2 env.properties.X temporary files...
CVE-2005-1914
CVE-2005-1914 affects CenterICQ versions 4.20.0 and earlier. The vulnerability arises because CenterICQ creates temporary files with predictable file names, enabling a local attacker to perform a symlink attack to overwrite arbitrary files via the gg.token.PID temporary file. The connected source...
[Full-disclosure] [ZH2005-16SA] Insecure temporary file creation in Skype for Linux
ZH2005-16SA Insecure temporary file creation in Skype for Linux Application: Skype for Linux Version affected: = 1.1.0.20 Vendor website : http://www.skype.com Author: Giovanni Delvecchio e-mail: [email protected] About Skype ======== Skype is a free program that uses the latest P2P technolog...
CVE-2002-2001
The CVE relates to jmcce 1.3.8 on Mandrake 8.1. It creates log files in /tmp with predictable names, enabling a local user to perform a symlink attack to overwrite arbitrary files. Root-level risk is implied by Mandrake advisory context (jmcce runs with elevated privileges and writes logs to a wo...
CVE-2002-2001
jmcce 1.3.8 in Mandrake 8.1 creates log files in /tmp with predictable names, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2002-2051
The processorweb plugin for ModLogAn 0.5.0 through 0.7.11, when used with the splitby option, allows local users to overwrite arbitrary files via a symlink attack on files specified as hostnames in a log file...
CVE-2002-2051
The CVE-2002-2051 entry concerns the processor_web plugin for ModLogAn (versions 0.5.0 through 0.7.11) when used with the splitby option. The vulnerability arises from a symlink-based attack targeting files specified as hostnames in a log file, allowing local attackers to overwrite arbitrary file...
FreeBSD : portupgrade -- insecure temporary file handling vulnerability (22f00553-a09d-11d9-a788-0001020eed82)
Simon L. Nielsen discovered that portupgrade handles temporary files in an insecure manner. This could allow an unprivileged local attacker to execute arbitrary commands or overwrite arbitrary files with the permissions of the user running portupgrade, typically root, by way of a symlink attack...