DEBIAN-CVE-2004-0969

The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0969

The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0968

The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files...

DEBIAN-CVE-2004-0974

The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2004-0969

The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files...

CVE-2003-1058

The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access DGA mode, allows local users to cause a denial of service Xsun crash or to create or overwrite arbitrary files on the system, probably via a symlink attack on temporary server files...

CVE-2003-1056

The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files...

CVE-2003-1058

The CVE concerns the Xsun server on Sun Solaris (versions 2.6–9) when running in Direct Graphics Access (DGA) mode. A local user can trigger a denial-of-service (Xsun crash) or gain the ability to create/overwrite arbitrary files, probably via a symlink attack on temporary server files. Affected ...

CVE-2003-1081

The CVE-2003-1081 vulnerability affects Solaris 8 in the Aspppls component, where a symlink attack on the temporary file named .asppp.fifo allows local users to overwrite arbitrary files. Root cause is a vulnerable handling/race condition around the .asppp.fifo in Aspppls, enabling a local attack...

CVE-2003-1081

Aspppls for Solaris 8 allows local users to overwrite arbitrary files via a symlink attack on the .asppp.fifo temporary file...

CVE-2003-1056

The CVE-2003-1056 entry concerns the ed editor on Sun Solaris 2.6, 7, and 8. It describes a local vulnerability where an attacker can create or overwrite arbitrary files through a symlink attack on temporary files, with complete confidentiality, integrity, and availability impact per CVSS. The vu...

security flaw

Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack...

CVE-2004-1382

The glibcbug script in glibc 2.3.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2004-0968...

CVE-2004-1387

The checkforensic script in apache-utils package 1.3.31 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files...

CVE-2005-0018

CVE-2005-0018 concerns the f2c package (f2 shell script) where a symlink attack on temporary files allows a local user to read arbitrary files. Affected feature is the f2 script in the f2c package version 3.1, with root cause outlined as a symlink-based local file read. The impact is limited to c...

CVE-2004-1382

CVE-2004-1382 affects glibc 2.3.4 and earlier via the glibcbug script, enabling a local symlink attack to overwrite arbitrary files in temporary locations. The root cause is the insecure handling of temporary files by the glibcbug script, with published advisories (e.g., CAN-2004-1382 and related...

CVE-2005-0017

The f2c translator in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files...

CVE-2005-0182

The moddosevasive module 1.9 and earlier for Apache creates temporary files with predictable filenames, which could allow remote attackers to overwrite arbitrary files via a symlink attack...

CVE-2005-0182

The vulnerability CVE-2005-0182 affects the mod_dosevasive Apache module, versions 1.9 and earlier. The issue arises because the module creates temporary files with predictable filenames, which could enable remote attackers to overwrite arbitrary files via a symlink attack. This could impact inte...

CVE-2005-0017

CVE-2005-0017 affects the f2c translator in the f2c package (version 3.1). It is exploitable by a local user via a symlink attack on temporary files to read arbitrary files. The OpenVAS/DSA entries confirm f2c advisories (DSA-661-1/2, GLSA 200501-43) and a Debian reference, indicating multiple ve...