8811 matches found
CVE-2003-0221
The CVE-2003-0221 entry concerns HP Tru64 UNIX 5.1B PK1 and earlier, where the (1) dupatch and (2) setld utilities are vulnerable to a local symlink attack that allows overwriting files and could lead to root privilege gain. Affected components are dupatch and setld; root-priority impact is state...
CVE-2003-0214
run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2003-0214
CVE-2003-0214 affects mime-support (Debian) up to version 3.22; run-mailcap can overwrite arbitrary files via a symlink attack on temporary files due to insecure temporary file handling. Debian issued DSAs 292-1/292-2/292-3 to fix mime-support. OpenVAS/NESSUS entries note the system may be missin...
CVE-2003-0214
run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
PHPSysInfo 2.0/2.1 - 'index.php' LNG File Disclosure
source: https://www.securityfocus.com/bid/7286/info PHPSysInfo has been reported to be vulnerable to a file disclosure issue. Local users may be capable of influencing the include path for PHPSysinfo language include files. If the malicious language file is symlinked to a web server readable file...
PHPSysInfo 2.02.1 - index.php LNG File Disclosure
PHPSysInfo 2.02.1 - index.php LNG File Disclosure source: https://www.securityfocus.com/bid/7286/info PHPSysInfo has been reported to be vulnerable to a file disclosure issue. Local users may be capable of influencing the include path for PHPSysinfo language include files. If the malicious langua...
cscope -- symlink attack vulnerability
cscope is vulnerable to a symlink attack which could lead to an attacker overwriting arbitrary files with the permissions of the user running cscope...
CVE-2002-1514
gdslockmgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a "iscinit1.X" temporary file, as demonstrated by modifying the xinetdbd file...
CVE-2001-1301
rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify files of other users via a symlink attack on a temporary file...
CVE-2002-1512
xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbrudscheck.dd temporary file...
CVE-2002-0678
CDE ToolTalk database server ttdbserver allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the TTTRANSACTION RPC procedure...
CVE-2001-1301
Technical details about CVE-2001-1301 are not publicly provided in the connected documents. The supplied materials only reiterate the generic symlink-attack description; monitor for updates.
CVE-2001-1378
fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files...
CVE-2002-0174
IRIX nsd symlink vulnerability (CVE-2002-0174): on SGI IRIX versions prior to 6.5.11, nsd can be tricked via a symlink attack on /var/tmp/nsd.dump to damage/modify the dump file when the nsd process receives USR1. Local users could potentially gain root privileges. The advisory fixes/change is to...
CVE-2002-0174
nsd on SGI IRIX before 6.5.11 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the nsd.dump file...
CVE-2002-0795
The rc system startup script for FreeBSD 4 through 4.5 allows local users to delete arbitrary files via a symlink attack on X Windows lock files...
CVE-2002-1517
fsrefs in IRIX 6.5 allows local users to conduct unauthorized file activities via a symlink attack, possibly via the .fsrlast file...
CVE-2002-0824
BSD pppd allows local users to change the permissions of arbitrary files via a symlink attack on a file that is specified as a tty device...
CVE-2002-0795
CVE-2002-0795 affects the FreeBSD rc startup script (FreeBSD 4–4.5). The root cause is a symlink attack on X Window system lock files that allows local users to delete arbitrary files. Exploitation details are not provided in the available documents, so the exact steps and vulnerable files are no...