8811 matches found
CVE-2002-0213
CVE-2002-0213 affects SGI Xinet K-AShare (IRIX) 0.011.01. The vulnerability arises from a symlink attack on the VOLICON file, which is copied to the world-writable .HSicon directory in a shared path. This enables local users to read arbitrary files. The SGI advisory notes the issue as fixed in th...
CVE-2002-0887
CVE-2002-0887 affects scoadmin on Caldera/SCO OpenServer 5.0.5 and 5.0.6. The vulnerability is a symlink attack on temporary files (demonstrated via log files) that allows local users to overwrite arbitrary files, indicating a local access requirement and partial integrity impact. The NVD CVSS me...
CVE-2002-0678
CVE-2002-0678 relates to the CDE ToolTalk RPC database server (rpc.ttdbserverd). The OpenVAS/CERT CORE disclosures describe two vulnerabilities: (1) _TT_ISCLOSE range-check flaw permitting memory overwriting of the process when a local or remote client calls _TT_ISCLOSE; (2) _TT_TRANSACTION/log_f...
CVE-2002-0157
Nautilus 1.0.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on the .nautilus-metafile.xml metadata file...
CVE-2002-1516
rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack...
CVE-2002-0213
xkas in Xinet K-AShare 0.011.01 for IRIX allows local users to read arbitrary files via a symlink attack on the VOLICON file, which is copied to the .HSicon file in a shared directory...
CVE-2001-1378
The CVE-2001-1378 issue affects fetchmailconf in fetchmail prior to 5.7.4, where a symlink attack on temporary files allows local users to overwrite files owned by other users. The root cause is improper handling of temporary files during configuration, enabling a local, non-privileged user to le...
CVE-2002-0157
Nautilus 1.0.4 and earlier are affected by CVE-2002-0157 due to a symlink-attack in the creation of the .nautilus-metafile.xml metadata file. A local attacker can cause overwrites of arbitrary files in a target directory by exploiting an unchecked symlink when Nautilus copies files between direct...
CVE-2002-0824
CVE-2002-0824 affects BSD pppd, where a symlink attack on a file specified as a tty device allows local users to change permissions of arbitrary files. The description states this is a local privilege/subversion of permissions vulnerability, but the connected documents do not provide additional t...
CVE-2002-1550
dumpsmutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2002-1512
xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbrudscheck.dd temporary file...
CVE-2002-1512
BRU Workstation 17.0 is affected by CVE-2002-1512 due to a symlink attack on the xbru_dscheck.dd temporary file, enabling local users to overwrite arbitrary files and gain root privileges. The vulnerability arises from the described local access path and the resulting potential for privilege esca...
CVE-2003-0120
adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a predictable name...
CVE-2003-0120
adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a predictable name...
DEBIAN-CVE-2003-0120
adb2mhc in the mhc-utils package before 0.25+20010625-7.1 allows local users to overwrite arbitrary files via a symlink attack on a default temporary directory with a predictable name...
Low: Red Hat Security Advisory: python security update
An insecure use of a temporary file has been found in Python. Python is an interpreted, interactive, object-oriented programming language. Zack Weinberg discovered that os.execvpe from os.py in Python 2.2.1 and earlier creates temporary files with predictable names. This could allow local users t...
CVE-2003-0036
ml85p, as included in the printer-drivers package for Mandrake Linux, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable filenames of the form "mlg85p%d"...
CVE-2003-0036
ml85p, as included in the printer-drivers package for Mandrake Linux, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable filenames of the form "mlg85p%d"...
CVE-2003-0036
The CVE refers to Mandrake Linux printer-drivers (ml85p) where a race condition in opening a temporary file allows a local attacker to overwrite arbitrary files via symlink attacks on files named mlg85p%d. Affected component: ml85p within the printer-drivers package; root cause: predictable tempo...