CVE-2001-0169: Undefined Security Weakness

When using the LDPRELOAD environmental variable in SUID or SGID applications, glibc does not verify that preloaded libraries in /etc/ld.so.cache are also SUID/SGID, which could allow a local user to overwrite arbitrary files by loading a library from /lib or /usr/lib...

[SECURITY] [DSA-053-1] nedit symlink attack

Package : nedit Problem type : insecure temporary file Debian-specific: no The nedit Nirvana editor package as shipped in the non-free section accompanying Debian GNU/Linux 2.2/potato had a bug in its printing code: when printing text it would create a temporary file with the to be printed text a...

Дырка в PGP для Windows (ASCII parser)

Можно сконфигурировать .asc-файл таким образом, что при его разборе будет перезаписан любой файл...

Siemens Reliant UNIX 5.4 - ppd -T Race Condition

source: https://www.securityfocus.com/bid/2606/info Reliant Unix is a variant of the UNIX Operating System distributed by Fujitsu-Siemens. Reliant Unix is a scalable UNIX Operating system designed for use on Siemens servers. A problem in the operating system could make it possible for a user to...

CVE-2001-0222

webmin 0.84 and earlier allows local users to overwrite and create arbitrary files via a symlink attack...

Дырка в perfmon под SunOS

Некорректная работа с лог-файлом позволяет переписать любой системный файл...

Junsoft JSparm 4.0 - Logging Output File

Junsoft JSparm 4.0 - Logging Output File source: https://www.securityfocus.com/bid/2515/info JSparm is the Junsoft Performance Analysis Report Maker package. This software package provides an enhanced perfmon performance monitoring package and interface, as well as a performance report generation...

Junsoft JSparm 4.0 - Logging Output File

source: https://www.securityfocus.com/bid/2515/info JSparm is the Junsoft Performance Analysis Report Maker package. This software package provides an enhanced perfmon performance monitoring package and interface, as well as a performance report generation interface. A problem with the package...

Internet Explorer and Services for Unix 2.0 Telnet Client

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SecurityFocus.com http://www.securityfocus.com Vulnerability Report For Internet Explorer and Services for Unix 2.0 Telnet Client Date Published: 13 March 2001 Advisory ID: n/a Bugtraq ID: 2463 CVE CAN: None currently assigned. Title: Services for Uni...

CVE-2001-0120

useradd program in shadow-utils program may allow local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0142

squid 2.3 and earlier allows local users to overwrite arbitrary files via a symlink attack in some configurations...

CVE-2001-0140

arpwatch 2.1a4 allows local users to overwrite arbitrary files via a symlink attack in some configurations...

CVE-2001-0114

statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter...

CVE-2001-0132

Interscan VirusWall 3.6.x and earlier follows symbolic links when uninstalling the product, which allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0139

inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations...

CVE-2001-0125

exmh 2.2 and earlier allows local users to overwrite arbitrary files via a symlink attack on the exmhErrorMsg temporary file...

CVE-2001-0143

vpop3d program in linuxconf 1.23r and earlier allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0117

sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack...

CVE-2001-0119

gettyps 2.0.7j allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0131

htpasswd and htdigest in Apache 2.0a9, 1.3.14, and others allows local users to overwrite arbitrary files via a symlink attack...