CVE-2000-0948

CVE-2000-0948 corresponds to a local vulnerability in GnoRPM prior to version 0.95, where insecure handling of /tmp allows a local user to modify arbitrary files via a symlink attack. The Mandrake MDKSA-2000:055 advisory explicitly states that versions before 0.95 used files in /tmp insecurely an...

CVE-2000-1136

elvis-tiny before 1.4-10 in Debian GNU/Linux, and possibly other Linux operating systems, allows local users to overwrite files of other users via a symlink attack...

CVE-2000-0935

CVE-2000-0935 affects Samba 2.0.7: the SWAT (Samba Web Administration Tool) CGI log file is vulnerable to a symlink attack that lets local users overwrite arbitrary files. This is a local-privilege context with complete impact on confidentiality and integrity as indicated by the CVSS metrics. Sup...

CVE-2000-0080

CVE-2000-0080 describes a local-file overwrite flaw in AIX techlibss caused by a symlink attack . The vulnerability allows local users to overwrite files, with a partial integrity impact and no confidentiality or availability impact, according to the CVSS metrics ( LOCAL access; LOW complexity; N...

CVE-2000-0698

Minicom 1.82.1 and earlier on some Linux systems is affected by a local file-creation vulnerability via a symlink attack that could allow a local user to create arbitrary files owned by the uucp user. The description notes the affected version and attack vector, but the documents do not provide r...

CVE-2000-1135

CVE-2000-1135 describes a local privilege issue in the fshd (fsh daemon) on Debian GNU/Linux. The vulnerability allows a local user to overwrite files belonging to other users via a symbolic link (symlink) attack. The impact is partial confidentiality, integrity, and availability due to the abili...

CVE-2000-1137

CVE-2000-1137 affects GNU ed prior to 0.2-18.1. The issue arises from insecure temporary file handling, allowing a local user to influence files owned by others via a symlink attack in world-writable temporary directories. Consequence: potential local file overwrite or access when ed is invoked. ...

CVE-2000-0702

The CVE-2000-0702 issue affects HP-UX 11.00 (S008net.init) where the net.init rc script could be abused by a local user via a symlink attack from /tmp/stcp.conf to a targeted file, allowing overwriting of arbitrary files. The vulnerability is local and affects file integrity and confidentiality (...

CVE-2000-0935

Samba Web Administration Tool SWAT in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file...

CVE-2000-0959

CVE-2000-0959 concerns glibc2/ld.so: the loader does not clear LD_DEBUG_OUTPUT and LD_DEBUG before invoking programs from a setuid context. This can enable a local attacker to exploit a symlink to overwrite arbitrary files. Concrete details exist in CERT/CC reports (Debian advisory) describing th...

CVE-2000-1135

fshd fsh daemon in Debian GNU/Linux allows local users to overwrite files of other users via a symlink attack...

CVE-2000-0864

The CVE-2000-0864 issue affects the esound daemon used by GNOME, with versions up to and including 0.2.19. A race condition during creation of the Unix domain socket (and its accompanying world-writable /tmp/.esd directory) allows a local attacker to change permissions on arbitrary files/director...

CVE-2000-0959

glibc2 does not properly clear the LDDEBUGOUTPUT and LDDEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack...

CVE-2000-1137

GNU ed before 0.2-18.1 allows local users to overwrite the files of other users via a symlink attack...

CVE-2000-1162

ghostscript before 5.10-16 allows local users to overwrite files of other users via a symlink attack...

CVE-2000-0702

The net.init rc script in HP-UX 11.00 S008net.init allows local users to overwrite arbitrary files via a symlink attack that points from /tmp/stcp.conf to the targeted file...

CVE-2000-0948

GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack...

CVE-2000-0698

Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack...

CVE-2000-0934

Glint in Red Hat Linux 5.2 allows local users to overwrite arbitrary files and cause a denial of service via a symlink attack...

CVE-2000-0864

Race condition in the creation of a Unix domain socket in GNOME esound 0.2.19 and earlier allows a local user to change the permissions of arbitrary files and directories, and gain additional privileges, via a symlink attack...