PT-1999-1699 · Perl · Perl

Name of the Vulnerable Software and Affected Versions: Perl versions 5.004 04 and earlier Description: The issue allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file when Perl is run with the -e option. This is due to Perl following symbolic links...

CVE-2000-0029

UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack...

CVE-2000-0027

IBM Network Station Manager NetStation allows local users to gain privileges via a symlink attack...

CVE-1999-0988

UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack...

PT-1999-1508 · Unixware · Unixware

Name of the Vulnerable Software and Affected Versions: UnixWare affected versions not specified Description: The issue allows local users to read arbitrary files via a symlink attack. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

CVE-1999-0864

UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file...

SCO Unixware 7.0/7.0.1/7.1/7.1.1 - 'coredump' Symlink

source: https://www.securityfocus.com/bid/851/info Under certain versions of SCO UnixWare if a user can force a program with SGID Set Group ID to dump core they may launch a symlink attack by guessing the PID Process ID of the SGID process which they are calling. This is required because the...

SCO Unixware 7.07.0.17.17.1.1 - coredump Symlink

SCO Unixware 7.07.0.17.17.1.1 - coredump Symlink source: https://www.securityfocus.com/bid/851/info Under certain versions of SCO UnixWare if a user can force a program with SGID Set Group ID to dump core they may launch a symlink attack by guessing the PID Process ID of the SGID process which th...

freebsd.seyon.txt

Vuln 1 The Seyon Mess To summarize: Seyon was supposedly not meant to run with additional privileges. There are numerous problems with seyon and I've probably not found all of them. They are: Buffer Overflows: 1. $HOME 2. seyon -emulator $BUF 3. seyon -modems $BUF 4. many long text box input stri...

CVE-1999-0857

FreeBSD gdc program allows local users to modify files via a symlink attack...

CVE-1999-0963

FreeBSD mountunion command allows local users to gain root privileges via a symlink attack...

CVE-1999-0860

Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack...

PT-1999-1441 · Sco · Sco Openserver

Name of the Vulnerable Software and Affected Versions: SCO OpenServer affected versions not specified Description: The issue allows local users to corrupt files through a symlink attack, exploiting the userOsa in SCO OpenServer. Recommendations: At the moment, there is no information about a newe...

CVE-1999-1541

shell-lock in Cactus Software Shell Lock allows local users to read or modify decoded shell files before they are executed, via a symlink attack on a temporary file...

CVE-1999-0433

XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service...

CVE-1999-0433

XFree86 startx is affected by a symlink attack allowing local users to create files in restricted directories, potentially gaining privileges or causing a denial of service. The provided documents do not specify affected versions or a fix; one PT Security entry notes no information about a newer ...

CVE-1999-0374

CVE-1999-0374 : Debian GNU/Linux cfengine is vulnerable to a symlink attack. Connected documents confirm the issue but do not specify affected versions or a fixed release. PT-1999-1061 notes no information about a newer version containing a fix; monitoring for updates is advised. No exploit detai...

CVE-1999-0374

Debian GNU/Linux cfengine package is susceptible to a symlink attack...

CVE-1999-0786

The dynamic linker in Solaris allows a local user to create arbitrary files via the LDPROFILE environmental variable and a symlink attack...

dtspcd_vuln.txt

Subject: Vulnerability in dtspcd To: [email protected] Hello, I discovered the following security problem in dtspcd, part of CDE: Description ----------- The CDE subprocess daemon /usr/dt/bin/dtspcd contains an insufficient check on client credentials. Impact ------ The insufficient check...