Design/Logic Flaw

Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...

CVE-2013-1809

CVE-2013-1809 affects Gambas before 3.4.0. The issue arises from insecure temporary directories, allowing remote attackers to move or manipulate directory contents or perform symlink attacks. This is documented across multiple sources (NVD entry and related advisories). The provided materials des...

CVE-2013-1809

Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...

CVE-2011-1408

ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...

CVE-2011-1408

ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...

Code injection

ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...

CVE-2011-1408

ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...

CVE-2011-1408

ikiwiki before 3.20110608 allows remote attackers to hijack root's tty and run symlink attacks...

CVE-2011-1408

The CVE-2011-1408 entry applies to ikiwiki prior to version 3.20110608. The vulnerability enables remote attackers to hijack the root user’s tty and perform symlink attacks. From the description, the attack is remote and does not require authentication, with network access identified as the attac...

CVE-2006-1390

The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to modify saved games files to execute arbitrary code via buffer overflows and overwrite arbitrary files via symlink attacks...

CVE-2019-12209

Yubico pam-u2f 1.0.7 attempts parsing of the configured authfile default $HOME/.config/Yubico/u2fkeys as root unless openasuser was enabled, and does not properly verify that the path lacks symlinks pointing to other files on the system owned by root. If the debug option is enabled in the PAM...

CVE-2019-11503

snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir to the current working directory of the calling user, aka a "cwd restore permission bypass."...

openSUSE Security Update : rpm (openSUSE-2019-564)

This update for rpm fixes the following issues : This security vulnerability was fixed : - CVE-2017-7500: Fixed symlink attacks during RPM installation bsc943457 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

GLSA-201903-01 : Keepalived: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201903-01 Keepalived: Multiple vulnerabilities Multiple vulnerabilities have been discovered in keepalived. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could send a specially crafted...

Keepalived: Multiple vulnerabilities

Background Keepalived is a strong & robust keepalive facility to the Linux Virtual Server project. Description Multiple vulnerabilities have been discovered in keepalived. Please review the CVE identifiers referenced below for details. Impact A remote attacker could send a specially crafted reque...

SUSE SLED15 / SLES15 Security Update : rpm (SUSE-SU-2018:2073-1)

This update for rpm fixes the following issues: This security vulnerability was fixed : - CVE-2017-7500: Fixed symlink attacks during RPM installation bsc943457 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has...

openSUSE: Security Advisory for rpm (openSUSE-SU-2018:2215-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2018:3240-1 Security update for nagios

This update for nagios fixes the following issues: - CVE-2016-8641 / CVE-2016-10089: fixed possible symlink attacks for files/directories created by root bsc1011630 / bsc1018047...

openSUSE Security Update : rpm (openSUSE-2018-808)

This update for rpm fixes the following issues : This security vulnerability was fixed : - CVE-2017-7500: Fixed symlink attacks during RPM installation bsc943457 This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

Security update for rpm (moderate)

This update for rpm fixes the following issues: This security vulnerability was fixed: - CVE-2017-7500: Fixed symlink attacks during RPM installation bsc943457 This update was imported from the SUSE:SLE-15:Update update project...