Solaris 7.0 - aspppd Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/292/info Aspppd is a tool shipped with Solaris for dial up PPP access. This tool creates files in the /tmp directory insecurely in particular /tmp/.asppp.fifo allowing other users to link to these files an possibly elevate their privelages. This program i...

CVE-1999-1221

dxchpwd in Digital Unix OSF/1 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file...

CVE-1999-0961

HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation...

CVE-1999-1187

Pine before version 3.94 allows local users to gain privileges via a symlink attack on a lockfile that is created when a user receives new mail...

Solaris 7.0 - Coredump File Write

Solaris 7.0 - Coredump File Write source: https://www.securityfocus.com/bid/296/info There is a vulnerability in the way Solaris 2.4 pre Jumbo Kernel Patch -35 for SPARC dumps core files. Under normal operation the operating system writes out a core image of a process when it is terminated due to...

Solaris 7.0 - 'Coredump' File Write

source: https://www.securityfocus.com/bid/296/info There is a vulnerability in the way Solaris 2.4 pre Jumbo Kernel Patch -35 for SPARC dumps core files. Under normal operation the operating system writes out a core image of a process when it is terminated due to the receipt of some signals. The...

CVE-1999-1388

passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument...

PT-2004-3661 · Postgresql · Postgresql

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 7.4.5 and earlier Description: The issue concerns the make oidjoins check script in PostgreSQL, which allows local users to overwrite files via a symlink attack on temporary files. This can lead to a violation of protected...