CVE-2000-0679: Undefined Security Weakness

The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files...

CVE-2000-0698: Undefined Security Weakness

Minicom 1.82.1 and earlier on some Linux systems allows local users to create arbitrary files owned by the uucp user via a symlink attack...

CVE-2000-0679

The CVS 1.10.8 client trusts pathnames that are provided by the CVS server, which allows the server to force the client to create arbitrary files...

CVE-2000-0691: Undefined Security Weakness

The faxrunq and faxrunqd in the mgetty package allows local users to create or modify arbitrary files via a symlink attack which creates a symlink in from /var/spool/fax/outgoing/.lastrun to the target file...

CVE-2000-0715: Improper Link Resolution Before File Access

DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file...

websitepro.txt

Sender: Bugtraq List From: Crono Subject: WebServer Pro 2.3.7 Vulnerability To: [email protected] -- WebSite Pro 2.3.7 Vulnerability -- WebSite Pro is a Web Server for Win95/98/NT plataforms. The vulnerability or bad server administration allow any user to create arbitrary files with...

Apache ASP module Apache::ASP source.asp Example File Arbitrary File Creation

The file /site/eg/source.asp is present on the remote Apache web server. This file comes with the Apache::ASP package and allows anyone to write to files in the same directory. An attacker may use this flaw to upload his own scripts and execute arbitrary commands on this host. C Tenable Network...

CVE-2000-0371: Undefined Security Weakness

The libmediatool library used for the KDE mediatool allows local users to create arbitrary files via a symlink attack...

CVE-2000-0354: Undefined Security Weakness

mirror 2.8.x in Linux systems allows remote attackers to create files one level above the local target directory...

CVE-2000-0194: Undefined Security Weakness

buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters...

CVE-1999-0786: Undefined Security Weakness

The dynamic linker in Solaris allows a local user to create arbitrary files via the LDPROFILE environmental variable and a symlink attack...

CVE-1999-0127: Undefined Security Weakness

swinstall and swmodify commands in SD-UX package in HP-UX systems allow local users to create or overwrite arbitrary files to gain root access...

unixware.pis.txt

Greetings, OVERVIEW A vulnerability in "/usr/local/bin/pis" on SCO UnixWare will allow any user to create arbitrary files with group "sys" privileges. A full root compromise is then trivial. BACKGROUND As usual, I've only tested UnixWare 7.1. DETAILS By creating a symlink between /tmp/pisdata and...

CVE-1999-0051

CVE-1999-0051 affects IRIX FLEXlm LicenseManager versions 4.0–5.0. The issue allows arbitrary file creation and program execution via the LicenseManager component. No explicit patch/version remediation is provided in the documents; one source (PT-1997-1030) recommends disabling FLEXlm on affected...

CVE-1999-0051: Undefined Security Weakness

Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX...

CVE-1999-0049: Undefined Security Weakness

Csetup under IRIX allows arbitrary file creation or overwriting...

suse.6.1.tmp.symlinks.txt

Date: Wed, 2 Jun 1999 11:01:32 +0200 From: Thomas Fischbacher To: [email protected] Subject: /tmp symlink problems in SuSE Linux 6.1 I notified SuSE GmbH several weeks ago about this problem, but didn't get any response, therefore this post to Bugtraq. With SuSE Linux 6.1 there are still a few...

G. Wilford man 2.3.10 - Symlink

source: https://www.securityfocus.com/bid/305/info The man command created a temporary file under /tmp with a predictable name and is willing to follow symbolic links. This may allow malicious local users to create arbitrarily named files. zsoelim1 is a utility part of the man package which...

AIX 3.x - bugfiler Arbitrary File Creation

AIX 3.x - bugfiler Arbitrary File Creation source: https://www.securityfocus.com/bid/1800/info A vulnerability exists in AIX 3. versions of bugfiler, a utility which automates the process of reporting an filing system bugs. Bugfiler, installed setuid root, creates files in a directory specified b...

AIX 3.x - bugfiler Arbitrary File Creation

source: https://www.securityfocus.com/bid/1800/info A vulnerability exists in AIX 3. versions of bugfiler, a utility which automates the process of reporting an filing system bugs. Bugfiler, installed setuid root, creates files in a directory specified by the user invoking the program example:...