8701 matches found
CVE-2001-1277
makewhatis in the man package before 1.5i2 allows an attacker in group man to overwrite arbitrary files via a man page whose name contains shell metacharacters...
CVE-2001-0406
Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using 1 a printer queue query, 2 the more command in smbclient, or 3 the mput command in smbclient...
CVE-2001-0417
Kerberos 4 aka krb4 allows local users to overwrite arbitrary files via a symlink attack on new ticket files...
CVE-2001-0417: Undefined Security Weakness
Kerberos 4 aka krb4 allows local users to overwrite arbitrary files via a symlink attack on new ticket files...
[SRT2001-10] - scoadmin /tmp issues
====================================================================== Strategic Reconnaissance Team Security AdvisorySRT2001-10 Topic: scoadmin /tmp issues Vendor: Santa Cruz Operations Release Date: 05/07/01 ====================================================================== .: Description...
CVE-2001-1346
Computer Associates ARCserveIT 6.61 and 6.63 also called ARCservIT allows local users to overwrite arbitrary files via a symlink attack on the temporary files 1 asagent.tmp or 2 inetd.tmp...
ARCservIT 6.616.63 Client - inetd.tmp Arbitrary File Overwrite
ARCservIT 6.616.63 Client - inetd.tmp Arbitrary File Overwrite source: https://www.securityfocus.com/bid/2748/info ARCservIT from Computer Associates contains a vulnerability which may allow malicious local users to corrupt arbitrary files. When it runs with the parameters 'inet add', 'asagent',...
ARCservIT 6.61/6.63 Client - asagent.tmp Arbitrary File Overwrite
source: https://www.securityfocus.com/bid/2741/info ARCservIT from Computer Associates contains a vulnerability which may allow malicious local users to overwrite arbitrary files. When it runs for the first time, 'asagent', opens and truncates it if it exists a file in /tmp called 'asagent.tmp'...
ARCservIT 6.61/6.63 Client - inetd.tmp Arbitrary File Overwrite
source: https://www.securityfocus.com/bid/2748/info ARCservIT from Computer Associates contains a vulnerability which may allow malicious local users to corrupt arbitrary files. When it runs with the parameters 'inet add', 'asagent', opens and overwrites it if it exists a file in /tmp called...
ARCservIT 6.616.63 Client - asagent.tmp Arbitrary File Overwrite
ARCservIT 6.616.63 Client - asagent.tmp Arbitrary File Overwrite source: https://www.securityfocus.com/bid/2741/info ARCservIT from Computer Associates contains a vulnerability which may allow malicious local users to overwrite arbitrary files. When it runs for the first time, 'asagent', opens an...
CVE-2001-1333
Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that could allow local users to overwrite files...
CVE-2001-0142
CVE-2001-0142 affects squid 2.3 and earlier. The issue is a local symlink/race condition that can cause local users to overwrite arbitrary files via temporary file handling in certain configurations. Impact is described as local privilege/content modification without remote access; CVSS reflects ...
CVE-2001-0169
CVE-2001-0169 : The GNU C Library (glibc) fails to verify that libraries loaded via LD_PRELOAD into SUID/SGID processes are also non-SUID/non-SGID when they come from /etc/ld.so.cache, enabling a local user to pre-load a library from /lib or /usr/lib and overwrite privileged files. Documented in ...
CVE-2001-0143
The CVE-2001-0143 issue affects the vpop3d component in the linuxconf package (versions 1.23r and earlier). The root cause is a temporary file race (symlink attack) that local users can exploit to overwrite arbitrary files. Public references in the Mandrake advisory MDKSA-2001:011 confirm the vul...
CVE-2001-0169
When using the LDPRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib...
CVE-2001-0105
Vulnerability in top in HP-UX 11.04 and earlier allows local users to overwrite files owned by the "sys" group...
CVE-2001-0140
arpwatch 2.1a4 is vulnerable to a local symlink attack that can allow a local user to overwrite arbitrary files in certain configurations. The connected Mandrake advisory MDKSA-2001:002 notes a temporary file race condition and indicates the fix is included in arpwatch version 2.1a10. Affected pr...
CVE-2001-0116
The CVE concerns gpm 1.19.3 where a race condition allows a local user to exploit predictable /tmp filenames and symlink targets to overwrite/modify files the privileged gpm process uses. This is described in CERT/CC and Mandrake advisories, which note a temporary-file handling flaw; the impact i...
CVE-2001-0119
Getty_ps 2.0.7j is affected by a local symlink race that can cause overwriting of arbitrary files in /tmp, potentially impacting files writable by the effective UID (often root). Mandrake/MGK advisories indicate a temporary-file race fix, updating to getty_ps 2.1.0a (or newer) to remediate. CERT ...