2488 matches found
CVE-2004-0423
The logevent function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file...
CVE-2004-0423
The logevent function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file...
CVE-2004-0423: Undefined Security Weakness
The logevent function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file...
CVE-2004-0388: Undefined Security Weakness
The mysqldmulti script in MySQL allows local users to overwrite arbitrary files via a symlink attack...
CVE-2004-0107
The 1 post and 2 trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108...
CVE-2004-0372
xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the 1 xine-bugreport or 2 xine-check scripts...
FreeBSD-SA-04:07.cvs
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-04:07.cvs Security Advisory The FreeBSD Project Topic: CVS path validation errors Category: contrib Module: contribcvs Announced: 2004-04-15 Revised: 2004-04-16...
CVE-2004-0372: Undefined Security Weakness
xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the 1 xine-bugreport or 2 xine-check scripts...
mysqlbug tmpfile/symlink vulnerability.
Product: mysqlbug packaged with MySQL. Versions: All Bug: Symlink bug / tmpfile bug. Impact: Attacker's can overwrite arbitrary files. Risk: Low/Medium Date: March 24, 2004 Author: Shaun Colley Email: shaunige yahoo co uk WWW: http://www.nettwerked.co.uk Introduction MySQL is an open-source, fast...
MySQL insecure temporary file creation (mysqlbug)
Shaun Colley reports that the script mysqlbug' included with MySQL sometimes creates temporary files in an unsafe manner. As a result, an attacker may create a symlink in /tmp so that if another user invokes mysqlbug' and quits without making any changes, an arbitrary file may be overwritten with...
CVE-2004-0279: Undefined Security Weakness
AIM Sniff aimSniff.pl 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log...
CVE-2003-0202: Undefined Security Weakness
The 1 halstead and 2 gatherstats scripts in metrics 1.0 allow local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2004-0058: Undefined Security Weakness
Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the .pidantivir$$ temporary file...
CVE-2003-1528
nsrshutdown in Fujitsu Siemens NetWorker 6.0 allows local users to overwrite arbitrary files via a symlink attack on the nsrshPID temporary file...
CVE-2003-0877: Undefined Security Weakness
Mac OS X before 10.3 with core files enabled allows local users to overwrite arbitrary files and read core files via a symlink attack on core files that are created with predictable names in the /cores directory...
CVE-2003-0878: Undefined Security Weakness
slpd daemon in Mac OS X before 10.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file, a different vulnerability than CVE-2003-0875...
Mac OS X Arbitrary File Overwrite via Core Files
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Arbitrary File Overwrite via Core Files Release Date: 10/24/2003 Application: Kernel Platform: Mac OS X Severity: High Author: Dave G. [email protected] Vendor Status: Vendor has new releas...
CVE-2003-0875: Undefined Security Weakness
Symbolic link vulnerability in the slpd script slpd.allinit for OpenSLP before 1.0.11 allows local users to overwrite arbitrary files via the route.check temporary file...
CVE-2003-0844: Improper Link Resolution Before File Access
modgzip 1.3.26.1a and earlier, and possibly later official versions, when running in debug mode without the Apache log, allows local users to overwrite arbitrary files via 1 a symlink attack on predictable temporary filenames on Unix systems, or 2 an NTFS hard link on Windows systems when the...