CVE-2004-0388

CVE-2004-0388 affects the MySQL server via the mysqld_multi script, allowing a local user to overwrite arbitrary files through a symlink attack. The root cause is insecure handling of temporary/target paths, enabling a symlink-based overwrite. The documented impact is local access with partial in...

CVE-2004-0388

The mysqldmulti script in MySQL allows local users to overwrite arbitrary files via a symlink attack...

CVE-2004-0108

The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107...

CVE-2002-1576

lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program...

CVE-2004-0107

The 1 post and 2 trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108...

CVE-2004-0372

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the 1 xine-bugreport or 2 xine-check scripts...

CVE-2003-0202

The 1 halstead and 2 gatherstats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files...

CVE-2004-0108

The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107...

CVE-2004-0108

The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107...

DEBIAN-CVE-2004-0107

The 1 post and 2 trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108...

DEBIAN-CVE-2004-0108

The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107...

CVE-2004-0217

The LiveUpdate capability liveupdate.sh in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log...

DEBIAN-CVE-2004-0372

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the 1 xine-bugreport or 2 xine-check scripts...

CVE-2004-0372

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the 1 xine-bugreport or 2 xine-check scripts...

[SECURITY] [DSA 483-1] New mysql packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 483-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2004 http://www.debian.org/security/faq -...

[SECURITY] [DSA 483-1] New mysql packages fix insecure temporary file creation

-------------------------------------------------------------------------- Debian Security Advisory DSA 483-1 [email protected] http://www.debian.org/security/ Martin Schulze April 14th, 2004 http://www.debian.org/security/faq -...

DSA-483 mysql - insecure temporary file creation

Bulletin has no description...

CVE-2004-0381

CVE-2004-0381: MySQL's mysqlbug may be exploited locally to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file. The vulnerability is evidenced in multiple sources (NVD entry for CVE-2004-0381 with local attack vector and partial integrity impact) and is re...

CVE-2004-0381

mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file...

SuSEs YaST Online Update - possible symlink attack

author:l0om - l0omatexcluded.org - www.excluded.org date:05.04.2004 product:SuSE 9.0 maybe lower possible symlink attack in SuSEs YOU YaST Online Update in SuSE linux you can use YOU to auto update your system. you can do this by YaST or by hand with the command "onlineupdate". as a normal user y...