9180 matches found
HylaFAX < 4.2.2 RC1 xferfaxstats Symlink Arbitrary File Overwrite
Binary data 3236.prm...
CVE-2005-2663
CVE-2005-2663 affects masqmail: opening the log file allows a local attacker to overwrite arbitrary files via a symlink attack, due to masqmail not relinquishing privileges. Affected versions are pre-0.2.18. Debian/DSA references indicate fixes in masqmail 0.2.20-1sarge1 and related updates for w...
CVE-2005-2663
masqmail before 0.2.18 allows local users to overwrite arbitrary files via a symlink attack on a log file...
CVE-2005-3011
The sortoffline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-2663
Removed by vendor...
CVE-2005-2991
ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files using 1 zdiff or 2 zcmp, a different vulnerability than CVE-2004-0970...
CVE-2005-2991: Undefined Security Weakness
ncompress 4.2.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files using 1 zdiff or 2 zcmp, a different vulnerability than CVE-2004-0970...
CVE-2005-2944
The performfilesave function in GNOME Workstation Command Center gwcc 0.9.6 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the gwccout.txt temporary file...
CVE-2005-2944
The performfilesave function in GNOME Workstation Command Center gwcc 0.9.6 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the gwccout.txt temporary file...
CVE-2005-2944: Undefined Security Weakness
The performfilesave function in GNOME Workstation Command Center gwcc 0.9.6 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the gwccout.txt temporary file...
CVE-2005-2918
gtkdiskfree (versions 1.9.3 and earlier) is affected by CAN-2005-2918/CVE-2005-2918 due to insecure creation of a temporary file, enabling local attackers to overwrite arbitrary files via a symlink attack. Impact is local access with the user’s privileges; no remote code execution is indicated in...
CVE-2005-2918: Undefined Security Weakness
The opencmdtube function in mount.c for gtkdiskfree 1.9.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the gtkdiskfree temporary file...
CVE-2005-2864
URBAN 1.5.31 allows local users to overwrite arbitrary files via a symlink attack on the 1 high score or 2 save game files...
CVE-2005-2864
CVE-2005-2864 describes a local vulnerability in URBAN 1.5.3_1 where local users can overwrite arbitrary files through a symlink attack targeting the (1) high score or (2) save game files. The core root cause is a symlink-related file overwrite path that an unprivileged user can exploit, with a r...
CVE-2005-2809
silc daemon silcd.c in Secure Internet Live Conferencing SILC 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.PID.stats temporary file...
CVE-2005-2809: Undefined Security Weakness
silc daemon silcd.c in Secure Internet Live Conferencing SILC 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.PID.stats temporary file...
CVE-2005-1915
The vulnerability CVE-2005-1915 affects log4sh up to version 1.2.5, where the log4sh_readProperties function is exploitable. The root cause is a symlink attack on predictable log4sh.$$ filenames, enabling local attackers to overwrite arbitrary files. The CVSS-derived impact is low base score with...
CVE-2005-1915: Undefined Security Weakness
The log4shreadProperties function in log4sh 1.2.5 and earlier allows local users to overwrite arbitrary files via a symlink attack on predictable log4sh.$$ filenames...
iDEFENSE Security Advisory 08.29.05: Adobe Version Cue VCNative Arbitrary File Overwrite Vulnerability
Adobe Version Cue VCNative Arbitrary File Overwrite Vulnerability iDEFENSE Security Advisory 08.29.05 www.idefense.com/application/poi/display?id=297&type=vulnerabilities August 29, 2005 I. BACKGROUND Adobe Version Cue is a software version tracking system for Adobe products distributed with Adob...
