8799 matches found
CVE-2001-0125
exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file...
CVE-2001-0143
vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0119
gettyps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0131
htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0138
privatepw program in wu-ftpd before 2.6.1-6 allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0116
gpm 1.19.3 allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0117
sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack...
fcron 0.9.5 is vulnerable to a symlink attack
What we need: we need that root updates our crontab file fcrontab -u kiss -e What we get: we get written /etc/shadow in our crontab file or any other file we want This is just a proof of concept. What we have to do is run the exploit above from a normal user shell. Then, in a root console, we...
CVE-2000-0890
periodic in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0036
KTH Kerberos IV allows local users to overwrite arbitrary files via a symlink attack on a ticket file...
CVE-2001-0132
Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0131
CVE-2001-0131 is linked in Debian/OpenVAS advisories (e.g., DSA 021-1/188, OpenVAS entries) and references Apache components, but the connected documents do not provide detailed technical description of the root cause or explicit fixes beyond noting the vulnerability and CVSS scores. The Debian/O...
CVE-2001-0131
htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0079
Support Tools Manager STM A.22.00 for HP-UX allows local users to overwrite arbitrary files via a symlink attack on the toolstat.txt log file...
CVE-2001-0095
catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the smanPID temporary file...
CVE-2001-0078
in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS...
CVE-2001-0059
patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0069
dialog before 0.9a-20000118-3bis in Debian GNU/Linux allows local users to overwrite arbitrary files via a symlink attack...
CVE-2001-0079
CVE-2001-0079 affects HP-UX Support Tools Manager (STM) A.22.00. A local user can exploit a symlink race to overwrite arbitrary files by targeting the tool_stat.txt log file, enabling local file modification. The entry explicitly lists a local attack vector with a partial integrity impact and no ...